Overview

overview

10

Static

static

90ccaee873...97.exe

windows7-x64

10

90ccaee873...97.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    90ccaee873291b0b428339d3f7405a9574dc45624fd7c69bd5c6ac67ea681f97

  • Size

    255KB

  • Sample

    221203-p3nqpsfa7y

  • MD5

    2c7b17320e20fdaad9b82e6802b43d69

  • SHA1

    98022315c931f275ec467534fc57452d742a82da

  • SHA256

    90ccaee873291b0b428339d3f7405a9574dc45624fd7c69bd5c6ac67ea681f97

  • SHA512

    e79beaf703ce53b8faa4ba43b107691e07d7eeb331f5adc43ee10f74516994725efc271f9ce924921f7f25cb0b468f9b1a459c46e6aef65b5f0408f95ae3037a

  • SSDEEP

    6144:q7WZh22Ltnko1hznaMnVDnqr8sevNgJZPKM9cQ:KWZIqJTnFVDnqw3lgbjh

Score
10/10
modiloaderbootkitpersistencetrojan

Malware Config

Targets

    • Target

      90ccaee873291b0b428339d3f7405a9574dc45624fd7c69bd5c6ac67ea681f97

    • Size

      255KB

    • MD5

      2c7b17320e20fdaad9b82e6802b43d69

    • SHA1

      98022315c931f275ec467534fc57452d742a82da

    • SHA256

      90ccaee873291b0b428339d3f7405a9574dc45624fd7c69bd5c6ac67ea681f97

    • SHA512

      e79beaf703ce53b8faa4ba43b107691e07d7eeb331f5adc43ee10f74516994725efc271f9ce924921f7f25cb0b468f9b1a459c46e6aef65b5f0408f95ae3037a

    • SSDEEP

      6144:q7WZh22Ltnko1hznaMnVDnqr8sevNgJZPKM9cQ:KWZIqJTnFVDnqw3lgbjh

    Score
    10/10
    modiloaderbootkitpersistencetrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Bootkit

1
T1067

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks