Overview

overview

10

Static

static

10

27ef898ce7...e1.exe

windows7-x64

10

27ef898ce7...e1.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    27ef898ce7ec9c0b79a6996a0b419de1

  • Size

    248KB

  • Sample

    231231-eymyhacda3

  • MD5

    27ef898ce7ec9c0b79a6996a0b419de1

  • SHA1

    4e8aed756fbc6133af13028c33366d2eaa43f954

  • SHA256

    f08df8dd8e3fe3de4a1ba4ba3bd355a233cf7febd5917b982ec5a949726c36a6

  • SHA512

    5c7fa67e7ed1e8ce238e58f0b55618d1fc13af4e19d9267f6e88e277beb2f10e6c0f0027a532a2d1d4b6e40da1b31dfcacf50ccb71a75dc231ff876869b6787a

  • SSDEEP

    3072:oPinzlxMF/kJaTcig4l4V+U9yFx3wwbRipdX3Iu2i+imVBfcGfS1OWCDHPT3c8:oPipyF/T1Mux5SdIu0VCGWHCE

Score
10/10
modiloadertrojan

Malware Config

Targets

    • Target

      27ef898ce7ec9c0b79a6996a0b419de1

    • Size

      248KB

    • MD5

      27ef898ce7ec9c0b79a6996a0b419de1

    • SHA1

      4e8aed756fbc6133af13028c33366d2eaa43f954

    • SHA256

      f08df8dd8e3fe3de4a1ba4ba3bd355a233cf7febd5917b982ec5a949726c36a6

    • SHA512

      5c7fa67e7ed1e8ce238e58f0b55618d1fc13af4e19d9267f6e88e277beb2f10e6c0f0027a532a2d1d4b6e40da1b31dfcacf50ccb71a75dc231ff876869b6787a

    • SSDEEP

      3072:oPinzlxMF/kJaTcig4l4V+U9yFx3wwbRipdX3Iu2i+imVBfcGfS1OWCDHPT3c8:oPipyF/T1Mux5SdIu0VCGWHCE

    Score
    10/10
    modiloadertrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks