Overview

overview

10

Static

static

3

0fbd79f3b0...7f.exe

windows7-x64

5

0fbd79f3b0...7f.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0fbd79f3b0d592a648dc83962966617f.exe

  • Size

    647KB

  • Sample

    240101-yhe3habbh4

  • MD5

    0fbd79f3b0d592a648dc83962966617f

  • SHA1

    4f87875d975a6c1ba34a038486bd8ce33c681723

  • SHA256

    cb326ae88c936ee0fd145144347b9ec55d0f920df80a5f7e668750ddb1173553

  • SHA512

    c4418c7cbbf6c6bcb6492442668cd5a90580471cb506ead362aea3c7030c36326f4cdf8800f2c2f3a57f594cdd51fd5be5d20af108335b0b82879c33f7589441

  • SSDEEP

    12288:zoWls4/D1Zm1AQPlDC1TjJNdr7Z/SwXJy51wKk6rEYO0sA4PcvjUkf:z3O471C1CbZvXJ5krm0shcvjnf

Score
10/10
modiloadertrojan

Malware Config

Targets

    • Target

      0fbd79f3b0d592a648dc83962966617f.exe

    • Size

      647KB

    • MD5

      0fbd79f3b0d592a648dc83962966617f

    • SHA1

      4f87875d975a6c1ba34a038486bd8ce33c681723

    • SHA256

      cb326ae88c936ee0fd145144347b9ec55d0f920df80a5f7e668750ddb1173553

    • SHA512

      c4418c7cbbf6c6bcb6492442668cd5a90580471cb506ead362aea3c7030c36326f4cdf8800f2c2f3a57f594cdd51fd5be5d20af108335b0b82879c33f7589441

    • SSDEEP

      12288:zoWls4/D1Zm1AQPlDC1TjJNdr7Z/SwXJy51wKk6rEYO0sA4PcvjUkf:z3O471C1CbZvXJ5krm0shcvjnf

    Score
    10/10
    modiloadertrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks