Overview

overview

10

Static

static

server.exe

windows7-x64

10

server.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c3cad19e8bc07f55ab393e01ebc0aec04d0ce3f646a0aa2b3b78ea0e12771f29

  • Size

    151KB

  • Sample

    221203-ajq96agg54

  • MD5

    bfdd3bc90c8916d7411184170357f9bc

  • SHA1

    6ddc9b63ec02d0a9f94bcc00e767258ce449a507

  • SHA256

    c3cad19e8bc07f55ab393e01ebc0aec04d0ce3f646a0aa2b3b78ea0e12771f29

  • SHA512

    5869c20e4d91c373e6f1833f36d46f481b765a51dad2d93e2275b2d8a29372d8dfbe3e4de8c5726d65e6a97a5c00ef0aea74d9fd386c9f47e4c1d443a82f2105

  • SSDEEP

    3072:nooYZNoWRSggSRtcSTwMJ/T4tuY1L4ayOVBln9rZFMezeZIkI:ng56SRtcudJB+4ayulnv+O2I

Score
10/10
modiloadertrojanupx

Malware Config

Targets

    • Target

      server.exe

    • Size

      174KB

    • MD5

      f524b3f80cdf6522ee17536d51079f1e

    • SHA1

      d1e908a0d08d143027c99b4992d083d37410e06a

    • SHA256

      16d794e7f97da1a35744d11253f23f0fe60203ef2ed090c83f6e2b322c61bdae

    • SHA512

      60908219fe4b40b98d25f950c1e850ff6a9e47d5823a2b6df777f20f3edd8281b013d30bd52a3801bff90ba4028d22404467ea46d1dac1ced4efacd5aea63ae0

    • SSDEEP

      3072:25l5SHLfLpygi+pyByB5LnRlshG05ZjZZ4vbABAGcdYRGuD2CsW:klSpy/aiyB5L0hj5i5uDpB

    Score
    10/10
    modiloadertrojanupx

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks