Overview

overview

10

Static

static

3

6fe93f39a7...75.exe

windows7-x64

10

6fe93f39a7...75.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6fe93f39a783d8d0a24d4679adc34675

  • Size

    196KB

  • Sample

    240122-v9rzlabdem

  • MD5

    6fe93f39a783d8d0a24d4679adc34675

  • SHA1

    ce9425cdba52b35cf94eb9a34f20e5a36f754629

  • SHA256

    e91ac2d0ba2fd89b2a9db98834e9f9d378736376d18babfd24b5f19939c1ef06

  • SHA512

    865c3e799ddee0aac1970e7097e356cef9172b4e06b43f2fed1ab89b35e7c5ef1b027c81cc3b6e056fc933a7c6ce1711ae63787a0f2272d2a4a95bcf1ae8d701

  • SSDEEP

    3072:BehvZ5uwVI0ecqWOgQmbNX/ZVC/5OoPM1mrkKFRrvPMQpetWgGrjgbaqqh7WeG7I:4hvDpGrgQShhyFMwrBFJUCe8/jMavq7I

Score
10/10
modiloaderevasionpersistencetrojanupx

Malware Config

Targets

    • Target

      6fe93f39a783d8d0a24d4679adc34675

    • Size

      196KB

    • MD5

      6fe93f39a783d8d0a24d4679adc34675

    • SHA1

      ce9425cdba52b35cf94eb9a34f20e5a36f754629

    • SHA256

      e91ac2d0ba2fd89b2a9db98834e9f9d378736376d18babfd24b5f19939c1ef06

    • SHA512

      865c3e799ddee0aac1970e7097e356cef9172b4e06b43f2fed1ab89b35e7c5ef1b027c81cc3b6e056fc933a7c6ce1711ae63787a0f2272d2a4a95bcf1ae8d701

    • SSDEEP

      3072:BehvZ5uwVI0ecqWOgQmbNX/ZVC/5OoPM1mrkKFRrvPMQpetWgGrjgbaqqh7WeG7I:4hvDpGrgQShhyFMwrBFJUCe8/jMavq7I

    Score
    10/10
    modiloaderevasionpersistencetrojanupx

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • UAC bypass

      evasiontrojan

    • ModiLoader Second Stage

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks