Overview

overview

10

Static

static

3

4e15d97f50...fc.exe

windows7-x64

1

4e15d97f50...fc.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    4e15d97f5029ae041c603fb61ef05efc.exe

  • Size

    430KB

  • Sample

    240109-wykxksfcck

  • MD5

    4e15d97f5029ae041c603fb61ef05efc

  • SHA1

    490697ddb2ce1738fc5bc6311d9c82a6e5602aa5

  • SHA256

    2bf36596191eb80dcc51d63021764777c4acfa4a6ab435fdfc2a50eb383abcd1

  • SHA512

    2783bbbf2f9af01515013451155cc4fe1a74a8a055c36c0a90628be2671fab70f6fb977ddc9228e19a5bb9bf27ed7007c669cc60c2d88786b0123c27c1618d14

  • SSDEEP

    6144:PLITfWbJg0wfnwbpCoKOst+WGlvT3U2IPUd6lypElt0rL3drUNnHkn:DIq20MnwybGlvT3jYUdhoKX3dcY

Score
10/10
modiloadertrojan

Malware Config

Targets

    • Target

      4e15d97f5029ae041c603fb61ef05efc.exe

    • Size

      430KB

    • MD5

      4e15d97f5029ae041c603fb61ef05efc

    • SHA1

      490697ddb2ce1738fc5bc6311d9c82a6e5602aa5

    • SHA256

      2bf36596191eb80dcc51d63021764777c4acfa4a6ab435fdfc2a50eb383abcd1

    • SHA512

      2783bbbf2f9af01515013451155cc4fe1a74a8a055c36c0a90628be2671fab70f6fb977ddc9228e19a5bb9bf27ed7007c669cc60c2d88786b0123c27c1618d14

    • SSDEEP

      6144:PLITfWbJg0wfnwbpCoKOst+WGlvT3U2IPUd6lypElt0rL3drUNnHkn:DIq20MnwybGlvT3jYUdhoKX3dcY

    Score
    10/10
    modiloadertrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks