Overview

overview

10

Static

static

3

Invoice.exe

windows7-x64

10

Invoice.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Invoice.exe

  • Size

    792KB

  • Sample

    230508-qjnf9sag68

  • MD5

    f67ab8557bf377cb8075aa19c1be2830

  • SHA1

    79cfebdbfcdfe57c64af0891046a6af1ce5c208a

  • SHA256

    f983cdcb52e6144ba8a87fb6f8904f39d3626be45c1725bdb89a2522525f3a9b

  • SHA512

    d8cd20edd78a12ed10d9e5e1ac91b592696a80aec325eb1d69c4fd01de6c81aa4f8905a0b69b2d09ccb81c05e4f60454a83ebbca4703e0176ec4e73b9a040e4e

  • SSDEEP

    12288:vX44VFiwL9aDSm20iw+hm4m7YHDcbhT4EbLGHrn1XAjQzB/PD:vpzH9aDSm2A+hmD6c9T4EvGHr1QE9/P

Score
10/10
modiloadertrojan

Malware Config

Targets

    • Target

      Invoice.exe

    • Size

      792KB

    • MD5

      f67ab8557bf377cb8075aa19c1be2830

    • SHA1

      79cfebdbfcdfe57c64af0891046a6af1ce5c208a

    • SHA256

      f983cdcb52e6144ba8a87fb6f8904f39d3626be45c1725bdb89a2522525f3a9b

    • SHA512

      d8cd20edd78a12ed10d9e5e1ac91b592696a80aec325eb1d69c4fd01de6c81aa4f8905a0b69b2d09ccb81c05e4f60454a83ebbca4703e0176ec4e73b9a040e4e

    • SSDEEP

      12288:vX44VFiwL9aDSm20iw+hm4m7YHDcbhT4EbLGHrn1XAjQzB/PD:vpzH9aDSm2A+hmD6c9T4EvGHr1QE9/P

    Score
    10/10
    modiloadertrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks