Overview

overview

10

Static

static

bc777075c2...40.exe

windows7-x64

10

bc777075c2...40.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bc777075c2d7b0e64a6430476f77cd8a63618b9b79e19394183fa35b23afa640

  • Size

    545KB

  • Sample

    230130-ep14rsge83

  • MD5

    ddc87cbd34c19161ea3d3b55b1888107

  • SHA1

    96856473b6be57b05bdafc7bc33b69d7418b78a6

  • SHA256

    bc777075c2d7b0e64a6430476f77cd8a63618b9b79e19394183fa35b23afa640

  • SHA512

    368912d8c614dd5f113c9a6f1a81066e29d2af51851c0fe4f7dae7131760f2e4b9b83bce7afaa890da444681853fe21744fe6815c254d19f3c8430edf1b9465b

  • SSDEEP

    12288:nvuWauKWUBCv4oJ7/4ZCL2fJpgbaISXV8BiLjVjJINtTirdF:nvSu9UG3twI0pIaMWrwTEd

Score
10/10
modiloaderbootkitpersistencetrojan

Malware Config

Targets

    • Target

      bc777075c2d7b0e64a6430476f77cd8a63618b9b79e19394183fa35b23afa640

    • Size

      545KB

    • MD5

      ddc87cbd34c19161ea3d3b55b1888107

    • SHA1

      96856473b6be57b05bdafc7bc33b69d7418b78a6

    • SHA256

      bc777075c2d7b0e64a6430476f77cd8a63618b9b79e19394183fa35b23afa640

    • SHA512

      368912d8c614dd5f113c9a6f1a81066e29d2af51851c0fe4f7dae7131760f2e4b9b83bce7afaa890da444681853fe21744fe6815c254d19f3c8430edf1b9465b

    • SSDEEP

      12288:nvuWauKWUBCv4oJ7/4ZCL2fJpgbaISXV8BiLjVjJINtTirdF:nvSu9UG3twI0pIaMWrwTEd

    Score
    10/10
    modiloaderbootkitpersistencetrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks