Overview

overview

10

Static

static

10

5c635c6cd3...e4.exe

windows7-x64

10

5c635c6cd3...e4.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5c635c6cd331bc866dad9e83c205dba1eadfca2b17e6c6b0e72c41f5a303d7e4

  • Size

    239KB

  • Sample

    221129-x6xrsacd4w

  • MD5

    59409d3d4b296b9ee85f87f0a5b567de

  • SHA1

    fc6682e2a4a83555e92aec9882c7ea4fbfe738c8

  • SHA256

    5c635c6cd331bc866dad9e83c205dba1eadfca2b17e6c6b0e72c41f5a303d7e4

  • SHA512

    67238e3b5df3845c76f364894c85aedc3a0ca13ee9428a0f1430431fd31464a8298be8db8906433407dbd55b5239d90770ec7b123f7f01f374ad64f841adfc5b

  • SSDEEP

    6144:+G7u6jrkwvKaXR0cyYLF6lcBapBddNheAZ8DfV:37u6jvnXRsLiATNhepV

Score
10/10
modiloaderpersistencetrojanupx

Malware Config

Targets

    • Target

      5c635c6cd331bc866dad9e83c205dba1eadfca2b17e6c6b0e72c41f5a303d7e4

    • Size

      239KB

    • MD5

      59409d3d4b296b9ee85f87f0a5b567de

    • SHA1

      fc6682e2a4a83555e92aec9882c7ea4fbfe738c8

    • SHA256

      5c635c6cd331bc866dad9e83c205dba1eadfca2b17e6c6b0e72c41f5a303d7e4

    • SHA512

      67238e3b5df3845c76f364894c85aedc3a0ca13ee9428a0f1430431fd31464a8298be8db8906433407dbd55b5239d90770ec7b123f7f01f374ad64f841adfc5b

    • SSDEEP

      6144:+G7u6jrkwvKaXR0cyYLF6lcBapBddNheAZ8DfV:37u6jvnXRsLiATNhepV

    Score
    10/10
    modiloaderpersistencetrojanupx

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Modifies Installed Components in the registry

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks