Overview

overview

10

Static

static

1

Nordahl_An...sx.bat

windows11-21h2-x64

10

Resubmissions

20/02/2024, 21:35

240220-1fb9yafb7z10

20/02/2024, 21:33

240220-1ehqbsff8610

20/02/2024, 21:23

240220-z8n9jaff2910

Sharing

Copy URL Twitter E-mail

General

  • Target
    Nordahl_Andersen_Order_no_106673_xlsx.bat
  • Size 1.7MB
  • Sample240220-1fb9yafb7z
  • SHA256 9aaa05d2a94d558491c99aadda9d5333cad854e42bfacb2848f694965884d661
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
modiloadertrojan

Malware Config

Targets

    • Target
      Nordahl_Andersen_Order_no_106673_xlsx.bat
    • Size 1.7MB
    • SHA256 9aaa05d2a94d558491c99aadda9d5333cad854e42bfacb2848f694965884d661
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    modiloadertrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks