Overview

overview

10

Static

static

10

89b95f1953...22.exe

windows7-x64

10

89b95f1953...22.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    89b95f19533622d2f9bba20b88bce100afc33193111f8837657b937c7a385522

  • Size

    43KB

  • Sample

    221203-ml7fdafd4y

  • MD5

    89cd02b502a2c720162c0ecc1d7d4cde

  • SHA1

    668cf9bf7ac08dd978df8cf55bd2e4da1016fbd4

  • SHA256

    89b95f19533622d2f9bba20b88bce100afc33193111f8837657b937c7a385522

  • SHA512

    ed831166bf1ca3870171b7c86d65854bd5636b7b88267c08582d0d6da974dde7f995c1649a3d0d99a372660ceb0475c949a9bc048532f08e321c1856ce3068ff

  • SSDEEP

    768:8NCiq1Qx6CTMbd+yFKyQitvODbPdF66uzBPGlSi:liq1QbTcdpFeitIDdobFej

Score
10/10
modiloadertrojan

Malware Config

Targets

    • Target

      89b95f19533622d2f9bba20b88bce100afc33193111f8837657b937c7a385522

    • Size

      43KB

    • MD5

      89cd02b502a2c720162c0ecc1d7d4cde

    • SHA1

      668cf9bf7ac08dd978df8cf55bd2e4da1016fbd4

    • SHA256

      89b95f19533622d2f9bba20b88bce100afc33193111f8837657b937c7a385522

    • SHA512

      ed831166bf1ca3870171b7c86d65854bd5636b7b88267c08582d0d6da974dde7f995c1649a3d0d99a372660ceb0475c949a9bc048532f08e321c1856ce3068ff

    • SSDEEP

      768:8NCiq1Qx6CTMbd+yFKyQitvODbPdF66uzBPGlSi:liq1QbTcdpFeitIDdobFej

    Score
    10/10
    modiloadertrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks