Overview

overview

10

Static

static

b0a2b44574...c3.exe

windows7-x64

10

b0a2b44574...c3.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b0a2b4457437a4a4aaff0305753b6302cd9cae914de18d53a20003c2bfbe8ac3

  • Size

    475KB

  • Sample

    221128-f4q3sahd57

  • MD5

    2ee6eca90ed4186feb0eeb73a21050b5

  • SHA1

    56fb41bddb1d65e30addd5f8e6eb4f31e4afe888

  • SHA256

    b0a2b4457437a4a4aaff0305753b6302cd9cae914de18d53a20003c2bfbe8ac3

  • SHA512

    e5d070e0b24d03cde6e6221d0b6c27061c6889f3129d8d78f0b60d314d025c4a4deac99e4c926fe332aefa81be730a211a36ce204bcb4447faf76a25d6d35a70

  • SSDEEP

    6144:kqwX56LLhzK5q8lVoYWLbTUrUPb534xff0mvuVwZO1zUwDqpKiPBlz96OdgNLKi1:kqoQdUnXWLPUrUjFCfS8ESzX41

Score
10/10
modiloadertrojan

Malware Config

Targets

    • Target

      b0a2b4457437a4a4aaff0305753b6302cd9cae914de18d53a20003c2bfbe8ac3

    • Size

      475KB

    • MD5

      2ee6eca90ed4186feb0eeb73a21050b5

    • SHA1

      56fb41bddb1d65e30addd5f8e6eb4f31e4afe888

    • SHA256

      b0a2b4457437a4a4aaff0305753b6302cd9cae914de18d53a20003c2bfbe8ac3

    • SHA512

      e5d070e0b24d03cde6e6221d0b6c27061c6889f3129d8d78f0b60d314d025c4a4deac99e4c926fe332aefa81be730a211a36ce204bcb4447faf76a25d6d35a70

    • SSDEEP

      6144:kqwX56LLhzK5q8lVoYWLbTUrUPb534xff0mvuVwZO1zUwDqpKiPBlz96OdgNLKi1:kqoQdUnXWLPUrUjFCfS8ESzX41

    Score
    10/10
    modiloadertrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks