Overview

overview

10

Static

static

1

vertical_online.exe

windows7-x64

10

vertical_online.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    vertical_online.exe

  • Size

    2.7MB

  • Sample

    230216-q15f4shg62

  • MD5

    f2f45925b2c371ef661f066bb03cbfad

  • SHA1

    bc10317c07e6ff8a2d4aef1f9dbddc67a90de40f

  • SHA256

    9b5bb5111e2297afc18c04990c7588f730f9d17a69bb748ed823c0074bdb04aa

  • SHA512

    522f6644f81b5d7b748f3f3afaf789b4af29fa05b64e1f49e68179b0d943717fec4bcc228cb5c08bb6ca436f565977f38aceb935965d2d9dcfe4ca5644c9c723

  • SSDEEP

    49152:bqeNVfcqZIcKopG2vPhP9cfImP+HT4pnh+EhL7oG6WhpGJ0YF1I8P7Jop40jpv6f:WEa47KopbxP96RP+z4phDL0G6WPYo8Cx

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      vertical_online.exe

    • Size

      2.7MB

    • MD5

      f2f45925b2c371ef661f066bb03cbfad

    • SHA1

      bc10317c07e6ff8a2d4aef1f9dbddc67a90de40f

    • SHA256

      9b5bb5111e2297afc18c04990c7588f730f9d17a69bb748ed823c0074bdb04aa

    • SHA512

      522f6644f81b5d7b748f3f3afaf789b4af29fa05b64e1f49e68179b0d943717fec4bcc228cb5c08bb6ca436f565977f38aceb935965d2d9dcfe4ca5644c9c723

    • SSDEEP

      49152:bqeNVfcqZIcKopG2vPhP9cfImP+HT4pnh+EhL7oG6WhpGJ0YF1I8P7Jop40jpv6f:WEa47KopbxP96RP+z4phDL0G6WPYo8Cx

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader First Stage

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks