Overview

overview

10

Static

static

ebc51d400e...a2.exe

windows7-x64

10

ebc51d400e...a2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ebc51d400e9b1ec6b784f0e6896edf3eaa1f820b89a9747caeb1b010b9374ea2

  • Size

    225KB

  • Sample

    221205-wzgljsgf4w

  • MD5

    cd3aee9cabcf48e4964d30f306e02881

  • SHA1

    824cbe88454d6358ec58738f5bb1da61c187bd65

  • SHA256

    ebc51d400e9b1ec6b784f0e6896edf3eaa1f820b89a9747caeb1b010b9374ea2

  • SHA512

    fefef6c55f83de70d31f48d71b0b3d0d43c21a8d5585a391747aea96560c452a3477736851e12bbaf3afcdfb24754cbbad6d0aa8cbb54dac1c78aeba0469d382

  • SSDEEP

    6144:N1nD1buT2WTlHYbYU7Ailm4U8f/QcYQ9BNjZwkL:NZD1buT2ul4bciM4UwsQN1

Score
10/10
modiloadertrojan

Malware Config

Targets

    • Target

      ebc51d400e9b1ec6b784f0e6896edf3eaa1f820b89a9747caeb1b010b9374ea2

    • Size

      225KB

    • MD5

      cd3aee9cabcf48e4964d30f306e02881

    • SHA1

      824cbe88454d6358ec58738f5bb1da61c187bd65

    • SHA256

      ebc51d400e9b1ec6b784f0e6896edf3eaa1f820b89a9747caeb1b010b9374ea2

    • SHA512

      fefef6c55f83de70d31f48d71b0b3d0d43c21a8d5585a391747aea96560c452a3477736851e12bbaf3afcdfb24754cbbad6d0aa8cbb54dac1c78aeba0469d382

    • SSDEEP

      6144:N1nD1buT2WTlHYbYU7Ailm4U8f/QcYQ9BNjZwkL:NZD1buT2ul4bciM4UwsQN1

    Score
    10/10
    modiloadertrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks