Overview

overview

10

Static

static

85124e25f0...dc.exe

windows7-x64

10

85124e25f0...dc.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    85124e25f0af37e4a611e3b13a2513d120c24d0511d70f7ce43d3f0bcf2079dc

  • Size

    406KB

  • Sample

    221201-ccl3zahb71

  • MD5

    56b0265328e573f5e60c55a1cf5e8eb0

  • SHA1

    df3e30fc2c9c007ea318d108ce4b144fbd5ae56d

  • SHA256

    85124e25f0af37e4a611e3b13a2513d120c24d0511d70f7ce43d3f0bcf2079dc

  • SHA512

    a4bfe6e424b996b62845800e1ee65d99ad3f055cf837361bb6ff0239e4abc060b7a6018c96b145b60da5af27390b588590ea4a94278c7b59857704a5a1e362ca

  • SSDEEP

    12288:8r08XO5fYrhKgbfH1M66VAmokVJGeDk4+ADbbAjZc4o/0i:8rEGM66pVJGH4+Us

Score
10/10
modiloadertrojan

Malware Config

Targets

    • Target

      85124e25f0af37e4a611e3b13a2513d120c24d0511d70f7ce43d3f0bcf2079dc

    • Size

      406KB

    • MD5

      56b0265328e573f5e60c55a1cf5e8eb0

    • SHA1

      df3e30fc2c9c007ea318d108ce4b144fbd5ae56d

    • SHA256

      85124e25f0af37e4a611e3b13a2513d120c24d0511d70f7ce43d3f0bcf2079dc

    • SHA512

      a4bfe6e424b996b62845800e1ee65d99ad3f055cf837361bb6ff0239e4abc060b7a6018c96b145b60da5af27390b588590ea4a94278c7b59857704a5a1e362ca

    • SSDEEP

      12288:8r08XO5fYrhKgbfH1M66VAmokVJGeDk4+ADbbAjZc4o/0i:8rEGM66pVJGH4+Us

    Score
    10/10
    modiloadertrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks