Overview

overview

10

Static

static

1

Formulaire.cmd

windows7-x64

10

Formulaire.cmd

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Formulaire.CMD

  • Size

    4.4MB

  • Sample

    240611-wen5wswanr

  • MD5

    3a4ee24bb4e30149488acb8b5b807dfa

  • SHA1

    cdaac84ebe682dd75942886fece7286e7afcf816

  • SHA256

    c4fb47fd9abb01465a421c6e0412852ba422d892e6ddf533432e356b229a1995

  • SHA512

    d1dc8a3ba2754fa979addad77e1275f808270a4f47455af27b8dcf302a91086ab3f79fd5212dec8964116fd717ff1aa3e6aed6c277141d8bd504fd3d03b2ed20

  • SSDEEP

    49152:9qn6yInGos9t2oOfPUlIVHpkIuTErOSqcNX6xro0b+mZrRQNMg0Qw9eizGvp:h

Score
10/10
modiloadertrojan

Malware Config

Targets

    • Target

      Formulaire.CMD

    • Size

      4.4MB

    • MD5

      3a4ee24bb4e30149488acb8b5b807dfa

    • SHA1

      cdaac84ebe682dd75942886fece7286e7afcf816

    • SHA256

      c4fb47fd9abb01465a421c6e0412852ba422d892e6ddf533432e356b229a1995

    • SHA512

      d1dc8a3ba2754fa979addad77e1275f808270a4f47455af27b8dcf302a91086ab3f79fd5212dec8964116fd717ff1aa3e6aed6c277141d8bd504fd3d03b2ed20

    • SSDEEP

      49152:9qn6yInGos9t2oOfPUlIVHpkIuTErOSqcNX6xro0b+mZrRQNMg0Qw9eizGvp:h

    Score
    10/10
    modiloadertrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks