Overview

overview

10

Static

static

10

8ac8a90abd...e6.exe

windows7-x64

10

8ac8a90abd...e6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8ac8a90abd6e9ecec360a5051ea2de42dfe2d7c0ae95638c16a5dd9dab7e7fe6

  • Size

    203KB

  • Sample

    221128-fcgp2abd8t

  • MD5

    d406f8e4f555b2ffe68f66aa2162c6a7

  • SHA1

    c7e96ae10742d849fa2c3d79cce3f8f3bf4a30d1

  • SHA256

    8ac8a90abd6e9ecec360a5051ea2de42dfe2d7c0ae95638c16a5dd9dab7e7fe6

  • SHA512

    4233b71a60237c699ae2d1a6c53ceb9267878c2594853933f10dcdc316dc95e22d44ee5fcd4c0577298ab68cfb3047a00fc8d246e116900cd4e554db272f7c50

  • SSDEEP

    6144:k3nkFBFh2HhmbpKJfptLtKo7P3CEGP7ALD0X:k3kFBFecKhptAQoP74D0

Score
10/10
modiloadertrojan

Malware Config

Targets

    • Target

      8ac8a90abd6e9ecec360a5051ea2de42dfe2d7c0ae95638c16a5dd9dab7e7fe6

    • Size

      203KB

    • MD5

      d406f8e4f555b2ffe68f66aa2162c6a7

    • SHA1

      c7e96ae10742d849fa2c3d79cce3f8f3bf4a30d1

    • SHA256

      8ac8a90abd6e9ecec360a5051ea2de42dfe2d7c0ae95638c16a5dd9dab7e7fe6

    • SHA512

      4233b71a60237c699ae2d1a6c53ceb9267878c2594853933f10dcdc316dc95e22d44ee5fcd4c0577298ab68cfb3047a00fc8d246e116900cd4e554db272f7c50

    • SSDEEP

      6144:k3nkFBFh2HhmbpKJfptLtKo7P3CEGP7ALD0X:k3kFBFecKhptAQoP74D0

    Score
    10/10
    modiloadertrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks