Overview

overview

10

Static

static

a90ffb4889...4c.exe

windows7-x64

10

a90ffb4889...4c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a90ffb4889cc3805a8cfe4cd7660c8b3fb7963209f9ecec2a067f502e068834c

  • Size

    81KB

  • Sample

    221205-lnxtaaga33

  • MD5

    484715b7463aaf51600647ae727b1879

  • SHA1

    deb49fbd998691b051aa6a11335f26c425768486

  • SHA256

    a90ffb4889cc3805a8cfe4cd7660c8b3fb7963209f9ecec2a067f502e068834c

  • SHA512

    769dd6b093af83c8059d2cf6a49627ec85d0f05213ce92f5ef0eb62e581eb5584c7b32c6991cc0d697cccff7bb2ed32d3df130500c70c567628dfe1b1288f0c1

  • SSDEEP

    1536:fsqFtRq1DuS5zhwxeuc5jzyPY53w7XWaMSGcPkEFHElZ/osT:PFt8VhCyAaSv1eTT

Score
10/10
modiloadertrojan

Malware Config

Targets

    • Target

      a90ffb4889cc3805a8cfe4cd7660c8b3fb7963209f9ecec2a067f502e068834c

    • Size

      81KB

    • MD5

      484715b7463aaf51600647ae727b1879

    • SHA1

      deb49fbd998691b051aa6a11335f26c425768486

    • SHA256

      a90ffb4889cc3805a8cfe4cd7660c8b3fb7963209f9ecec2a067f502e068834c

    • SHA512

      769dd6b093af83c8059d2cf6a49627ec85d0f05213ce92f5ef0eb62e581eb5584c7b32c6991cc0d697cccff7bb2ed32d3df130500c70c567628dfe1b1288f0c1

    • SSDEEP

      1536:fsqFtRq1DuS5zhwxeuc5jzyPY53w7XWaMSGcPkEFHElZ/osT:PFt8VhCyAaSv1eTT

    Score
    10/10
    modiloadertrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks