Overview

overview

10

Static

static

3

bc6626b114...76.exe

windows7-x64

10

bc6626b114...76.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bc6626b114d68546c5af018efe67a4f8c321a476.exe

  • Size

    1.8MB

  • Sample

    231122-kjjkesbc72

  • MD5

    c0895699c1e9bd08c6b8f7e8c7bcd7d6

  • SHA1

    bc6626b114d68546c5af018efe67a4f8c321a476

  • SHA256

    5517cdcbe0571bef0456f9f214fd3cb73a7a0c7cb73a5833e31142938277623a

  • SHA512

    c8275534abce9d6c0b107e73971d160a2e5983816b961b543df1f18efcd27a0d62c155c168407f067f4fc484ef27af766a42582840781d53555e1338de35a266

  • SSDEEP

    49152:aD4+yRMXpcOX8IxTqh0eJa3DZEe9sRuCVCW40MyqChsyfue9Tb:aDqRMXpcOXX8Za31CuCc4MXC+yft

Score
10/10
modiloaderpersistencetrojan

Malware Config

Targets

    • Target

      bc6626b114d68546c5af018efe67a4f8c321a476.exe

    • Size

      1.8MB

    • MD5

      c0895699c1e9bd08c6b8f7e8c7bcd7d6

    • SHA1

      bc6626b114d68546c5af018efe67a4f8c321a476

    • SHA256

      5517cdcbe0571bef0456f9f214fd3cb73a7a0c7cb73a5833e31142938277623a

    • SHA512

      c8275534abce9d6c0b107e73971d160a2e5983816b961b543df1f18efcd27a0d62c155c168407f067f4fc484ef27af766a42582840781d53555e1338de35a266

    • SSDEEP

      49152:aD4+yRMXpcOX8IxTqh0eJa3DZEe9sRuCVCW40MyqChsyfue9Tb:aDqRMXpcOXX8Za31CuCc4MXC+yft

    Score
    10/10
    modiloadertrojanpersistence

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks