Overview

overview

10

Static

static

10

2bd5715bf8...57.exe

windows7-x64

10

2bd5715bf8...57.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2bd5715bf8a895c97031ed4482288657

  • Size

    270KB

  • Sample

    231225-tk35wschgp

  • MD5

    2bd5715bf8a895c97031ed4482288657

  • SHA1

    c9e3332803a3809a938c33506826caf4630aacb5

  • SHA256

    08f4f76df57c55902a70da5017d77ce8beebc2d6f14ef0c795acf66c1730ee42

  • SHA512

    8aba30cfcdcfa612a05e016dfd39b489190e26ea7fa69badd65ddbd7abe00c25dd7369fc7caa5fe9b3e1681240f3c10d6919caa20576db2fba19903bafec7eff

  • SSDEEP

    6144:qGyjnBSkuV1d4eZd88ORJIf/wTB4R53Cpc:5YnBSkuVUeZdYqwTl

Score
10/10
modiloaderevasiontrojan

Malware Config

Targets

    • Target

      2bd5715bf8a895c97031ed4482288657

    • Size

      270KB

    • MD5

      2bd5715bf8a895c97031ed4482288657

    • SHA1

      c9e3332803a3809a938c33506826caf4630aacb5

    • SHA256

      08f4f76df57c55902a70da5017d77ce8beebc2d6f14ef0c795acf66c1730ee42

    • SHA512

      8aba30cfcdcfa612a05e016dfd39b489190e26ea7fa69badd65ddbd7abe00c25dd7369fc7caa5fe9b3e1681240f3c10d6919caa20576db2fba19903bafec7eff

    • SSDEEP

      6144:qGyjnBSkuV1d4eZd88ORJIf/wTB4R53Cpc:5YnBSkuVUeZdYqwTl

    Score
    10/10
    modiloaderevasiontrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • UAC bypass

      evasiontrojan

    • ModiLoader Second Stage

    • Loads dropped DLL

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks