Overview

overview

10

Static

static

3

2006def632...74.exe

windows7-x64

10

2006def632...74.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2006def63214c8dc53916cbe464b7d74

  • Size

    105KB

  • Sample

    231230-3ghjfsdafk

  • MD5

    2006def63214c8dc53916cbe464b7d74

  • SHA1

    c0c9f3ab6daf63f68331bfdda1519f83eff04436

  • SHA256

    e8bad18695820a3d53c3a6a1c1bb56c0e3899aa760fea89b1631c11d8720b592

  • SHA512

    37ca78780a0f9af9629d1e5060f11245011154c72ff425d6cf99034ac9466b878534526691a07ed1532228255349fdb61e90831317dc32ce9ced7ffdf137a0b5

  • SSDEEP

    1536:c2tezYzcpxH8VBxYYKSry0NmiZ4Go048RxNZeECzQSWOBsZEEyuAARqAAe:ntezRfHWyHsZ6PcZOBsZEEyur6e

Score
10/10
modiloadertrojan

Malware Config

Targets

    • Target

      2006def63214c8dc53916cbe464b7d74

    • Size

      105KB

    • MD5

      2006def63214c8dc53916cbe464b7d74

    • SHA1

      c0c9f3ab6daf63f68331bfdda1519f83eff04436

    • SHA256

      e8bad18695820a3d53c3a6a1c1bb56c0e3899aa760fea89b1631c11d8720b592

    • SHA512

      37ca78780a0f9af9629d1e5060f11245011154c72ff425d6cf99034ac9466b878534526691a07ed1532228255349fdb61e90831317dc32ce9ced7ffdf137a0b5

    • SSDEEP

      1536:c2tezYzcpxH8VBxYYKSry0NmiZ4Go048RxNZeECzQSWOBsZEEyuAARqAAe:ntezRfHWyHsZ6PcZOBsZEEyur6e

    Score
    10/10
    modiloadertrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks