Overview

overview

10

Static

static

3

Izvod racu...gu.exe

windows7-x64

10

Izvod racu...gu.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    Izvod racuna u prilogu.exe
  • Size 1.1MB
  • Sample240829-yanpnsxerc
  • SHA256 d9fa5a32ffadff0527ca655025366ff697118e20647bfd73fe3670934a02c985
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
modiloadercredential_accessdiscoverystealertrojan

Malware Config

Targets

    • Target
      Izvod racuna u prilogu.exe
    • Size 1.1MB
    • SHA256 d9fa5a32ffadff0527ca655025366ff697118e20647bfd73fe3670934a02c985
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    modiloaderdiscoverytrojancredential_accessstealer

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Credentials from Password Stores: Credentials from Web Browsers

      Malicious Access or copy of Web Browser Credential store.

      credential_accessstealer

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks