Overview

overview

10

Static

static

3

Signed PI ... e.exe

windows7-x64

10

Signed PI ... e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7a67af69c0eb49de2263832528b47cce7b0d078e182339b3c2dfd633cf4bce22

  • Size

    882KB

  • Sample

    230902-cyek1sag2s

  • MD5

    9546ecfa58f9d0e0108dbe718671841d

  • SHA1

    6587eb64f6f01d5b78b515bc7ec84b2738a18c67

  • SHA256

    7a67af69c0eb49de2263832528b47cce7b0d078e182339b3c2dfd633cf4bce22

  • SHA512

    f8ace16f464a27f10f95f96adf09cb7c3d604fcc48476689f694098a6e76b027f54d808ebd03e761fa45e6c0da495e18aa551d2471b0cf0132caddd844b044cc

  • SSDEEP

    24576:q0pyWX6Sd3ca4GeSIq9TPHawYYMWttL1un1wgZlyYs:qWqSaLGJXiwdxMSgZlyN

Score
10/10
modiloadertrojan

Malware Config

Targets

    • Target

      Signed PI and Payment Order e.exe

    • Size

      1.3MB

    • MD5

      a05dd63e8340689e591dd9af542ebf06

    • SHA1

      981eeb1019890710d4ea6f1b42cc3afe4adf1017

    • SHA256

      4d5498e7aba7dcafa3c1ccd494fa7bafb6d8ebaaf5c854168a9de5f1b7602e0d

    • SHA512

      703e68342046894a6453c15cab080923e96cf7e545fd45b45dfaba36470e950db54822a49cce17ca656f64372066ad7d867e5dd466299c57ec7ac0839492348b

    • SSDEEP

      24576:6JlDoyUj2DceiZF5NIcbjAYKUx7ADHxOx4yHR7eTKwxK5K2TKEDDNuhoU:6J1sPVAYdA7khFEacMz8oU

    Score
    10/10
    modiloadertrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks