Overview

overview

10

Static

static

890eac11e2...d2.exe

windows7-x64

10

890eac11e2...d2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    890eac11e20f4e4d57349be3a96f410eb81bb302d75d61c79bfdf24bda3f26d2

  • Size

    574KB

  • Sample

    221201-bwl2msfg4t

  • MD5

    f8c463a63440fe19c1565f129f295869

  • SHA1

    c7590c2a90652d4746d04e6ff04a2edd6c5d722e

  • SHA256

    890eac11e20f4e4d57349be3a96f410eb81bb302d75d61c79bfdf24bda3f26d2

  • SHA512

    6603bf646ee2e9d8d41d0d58a658306266c8b87b6c65b87c505fd3da0225061fb1e98666fe633abcdd1a9b1d5653d8184963fe286ca180502da14090141d0f3b

  • SSDEEP

    12288:6/kAA0DWdbJafXdcSw4jtXrvA8urnyHSJD7QXHAyFBr8Fr/pIRt:6/kA1DWt3OvxmnyHWg3FH8F4

Score
10/10
modiloadertrojan

Malware Config

Targets

    • Target

      890eac11e20f4e4d57349be3a96f410eb81bb302d75d61c79bfdf24bda3f26d2

    • Size

      574KB

    • MD5

      f8c463a63440fe19c1565f129f295869

    • SHA1

      c7590c2a90652d4746d04e6ff04a2edd6c5d722e

    • SHA256

      890eac11e20f4e4d57349be3a96f410eb81bb302d75d61c79bfdf24bda3f26d2

    • SHA512

      6603bf646ee2e9d8d41d0d58a658306266c8b87b6c65b87c505fd3da0225061fb1e98666fe633abcdd1a9b1d5653d8184963fe286ca180502da14090141d0f3b

    • SSDEEP

      12288:6/kAA0DWdbJafXdcSw4jtXrvA8urnyHSJD7QXHAyFBr8Fr/pIRt:6/kA1DWt3OvxmnyHWg3FH8F4

    Score
    10/10
    modiloadertrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks