Overview

overview

10

Static

static

8

e951ae121f...3e.exe

windows7-x64

10

e951ae121f...3e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e951ae121fa808ba0a4c0f1f63027417fa1873329087c08134fed6aefe150b3e

  • Size

    622KB

  • Sample

    230130-eqb62aaa7w

  • MD5

    256421fbefe544549b7a752c91b80d97

  • SHA1

    80c54e48e1d957c090f4b9718214089a6833761c

  • SHA256

    e951ae121fa808ba0a4c0f1f63027417fa1873329087c08134fed6aefe150b3e

  • SHA512

    e48de93d4b98c74463d01d22f742512838e2d745a8214eda0744dcb995ea5ae7c93f2ffa119a308ecfdb47427eef9651ab0fcf4b54e51c44f6c2c11fd09b724f

  • SSDEEP

    12288:6Bf3OlMqp7MlT+S9QMGyMRwZ5MNEzpAXtF3Z4mxx7+ObNT4pZm+RR70:6BfQ1ELGZRwZiEStQmX7+SNcp0470

Score
10/10
modiloaderaspackv2trojan

Malware Config

Targets

    • Target

      e951ae121fa808ba0a4c0f1f63027417fa1873329087c08134fed6aefe150b3e

    • Size

      622KB

    • MD5

      256421fbefe544549b7a752c91b80d97

    • SHA1

      80c54e48e1d957c090f4b9718214089a6833761c

    • SHA256

      e951ae121fa808ba0a4c0f1f63027417fa1873329087c08134fed6aefe150b3e

    • SHA512

      e48de93d4b98c74463d01d22f742512838e2d745a8214eda0744dcb995ea5ae7c93f2ffa119a308ecfdb47427eef9651ab0fcf4b54e51c44f6c2c11fd09b724f

    • SSDEEP

      12288:6Bf3OlMqp7MlT+S9QMGyMRwZ5MNEzpAXtF3Z4mxx7+ObNT4pZm+RR70:6BfQ1ELGZRwZiEStQmX7+SNcp0470

    Score
    10/10
    modiloaderaspackv2trojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks