Overview

overview

10

Static

static

7

84d1340020...ef.exe

windows7-x64

10

84d1340020...ef.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    84d13400201df75d4056972cca0418b8437db91896284cc451abcf0485e011ef

  • Size

    1.3MB

  • Sample

    221201-r36ydshb99

  • MD5

    07b28e38829699684871c31d86a4972c

  • SHA1

    9d5e9c547392af4b04e495fbaf745f6f2357c440

  • SHA256

    84d13400201df75d4056972cca0418b8437db91896284cc451abcf0485e011ef

  • SHA512

    54d3e3622fa7580c73c3a6094436d08862d1f6d44030404b59a791185a9c20c46485d6745daaa66c4aff762fe1b203186f65d6e9e21767e14e0991bce89b5234

  • SSDEEP

    24576:8GvSuudbPhkduUSgGY4MntYLC6teHu0RmtCPAV1WmUARgQPIC3j91:D0PhN5uimYGAim+y1

Score
10/10
modiloaderevasionthemidatrojan

Malware Config

Targets

    • Target

      84d13400201df75d4056972cca0418b8437db91896284cc451abcf0485e011ef

    • Size

      1.3MB

    • MD5

      07b28e38829699684871c31d86a4972c

    • SHA1

      9d5e9c547392af4b04e495fbaf745f6f2357c440

    • SHA256

      84d13400201df75d4056972cca0418b8437db91896284cc451abcf0485e011ef

    • SHA512

      54d3e3622fa7580c73c3a6094436d08862d1f6d44030404b59a791185a9c20c46485d6745daaa66c4aff762fe1b203186f65d6e9e21767e14e0991bce89b5234

    • SSDEEP

      24576:8GvSuudbPhkduUSgGY4MntYLC6teHu0RmtCPAV1WmUARgQPIC3j91:D0PhN5uimYGAim+y1

    Score
    10/10
    modiloaderevasionthemidatrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • UAC bypass

      evasiontrojan

    • ModiLoader Second Stage

    • Loads dropped DLL

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Bypass User Account Control

1
T1088

Defense Evasion

Bypass User Account Control

1
T1088

Disabling Security Tools

1
T1089

Modify Registry

2
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks