modiloader | fb8c1f4db24332c1a27bc049604745b7a33e48b3c72e762398210fd6cce16cc0 | Triage

Sharing

General

Target

fb8c1f4db24332c1a27bc049604745b7a33e48b3c72e762398210fd6cce16cc0
Size

199KB
Sample

221204-ezl3lafc98
MD5

066afd09a3e79d3821dc36dd950bc510
SHA1

6d837a0b42b3f5da2d7641ad024bee3d8b06a45d
SHA256

fb8c1f4db24332c1a27bc049604745b7a33e48b3c72e762398210fd6cce16cc0
SHA512

0d0d961b2b5d258230aa9a961dfc31261408d0e1fa2c905556d2f617f90408a4f2b7b6d323a37e4602f1d8cdc0467997ec35ef8d3a50ae730c869c262de6677e
SSDEEP

3072:blYkCzJYIaQjEHX51JI20dLuJHUZp4FKPsy3dr:bAVdaQoHp1IdLAHUr3Lx

Score

10^/10

modiloader persistence

Malware Config

Targets

- Target
  
  fb8c1f4db24332c1a27bc049604745b7a33e48b3c72e762398210fd6cce16cc0
- Size
  
  199KB
- MD5
  
  066afd09a3e79d3821dc36dd950bc510
- SHA1
  
  6d837a0b42b3f5da2d7641ad024bee3d8b06a45d
- SHA256
  
  fb8c1f4db24332c1a27bc049604745b7a33e48b3c72e762398210fd6cce16cc0
- SHA512
  
  0d0d961b2b5d258230aa9a961dfc31261408d0e1fa2c905556d2f617f90408a4f2b7b6d323a37e4602f1d8cdc0467997ec35ef8d3a50ae730c869c262de6677e
- SSDEEP
  
  3072:blYkCzJYIaQjEHX51JI20dLuJHUZp4FKPsy3dr:bAVdaQoHp1IdLAHUr3Lx
Score

6^/10

persistence
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2