Overview

overview

10

Static

static

1

956ae61939...0b.rtf

windows7-x64

10

956ae61939...0b.rtf

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    956ae61939b3dc9f9bbaed850423740b.rtf

  • Size

    64KB

  • Sample

    240424-gde39sfc63

  • MD5

    956ae61939b3dc9f9bbaed850423740b

  • SHA1

    4b4df10a00758993952f3528561f7edbc630376e

  • SHA256

    67d023bc333bfbf254e2501026b793921c1bdb9fcff76f5c168c4caaf7887774

  • SHA512

    a48595b3b8d02fec3b1d56595dbe901ed1d81cb028eaa3ec2eb3f6e4b6d3c71b447e008697f199d2afaf885b5acb7af2f19998ee28cb3ec56f439add9a3ba481

  • SSDEEP

    1536:X5nyQDBuHtgHYeiTrk0cM0U6wHwF/TCPEPt6jUeGy5c18blwous6bWWU/m9:X5nyQ4Htg4eiT40cR5FLCPQt6jaUc18o

Score
10/10
modiloadertrojan

Malware Config

Targets

    • Target

      956ae61939b3dc9f9bbaed850423740b.rtf

    • Size

      64KB

    • MD5

      956ae61939b3dc9f9bbaed850423740b

    • SHA1

      4b4df10a00758993952f3528561f7edbc630376e

    • SHA256

      67d023bc333bfbf254e2501026b793921c1bdb9fcff76f5c168c4caaf7887774

    • SHA512

      a48595b3b8d02fec3b1d56595dbe901ed1d81cb028eaa3ec2eb3f6e4b6d3c71b447e008697f199d2afaf885b5acb7af2f19998ee28cb3ec56f439add9a3ba481

    • SSDEEP

      1536:X5nyQDBuHtgHYeiTrk0cM0U6wHwF/TCPEPt6jUeGy5c18blwous6bWWU/m9:X5nyQ4Htg4eiT40cR5FLCPQt6jaUc18o

    Score
    10/10
    modiloadertrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Blocklisted process makes network request

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Exploitation for Client Execution

1
T1203

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks