Overview

overview

10

Static

static

3

cadadcb671...0N.exe

windows7-x64

10

cadadcb671...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cadadcb6719598366e960f31a319a480N.exe

  • Size

    840KB

  • Sample

    240906-ll7wgaygpk

  • MD5

    cadadcb6719598366e960f31a319a480

  • SHA1

    1d375b97d4d49443e71d68b9d65da8f465c36d3f

  • SHA256

    2afbf92c4db6bbac81cbb782580a4c654d365ce4b8615aadb1bd17adebdcd5bc

  • SHA512

    3c0379fd23d2ea32f1021f36e08517184515ed105c44540c038fd728f125ed7e35d8223fbff020fcb13cb08504874975c631e0fa9cd54bb77eb28ddf8f6edbd9

  • SSDEEP

    24576:v1X3HJwXxPGxIR1ac5Irybw0UoBHgyzMZ97QNbHeR:vJ3HGXx+xIR1ac5I2w017MDyDeR

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      cadadcb6719598366e960f31a319a480N.exe

    • Size

      840KB

    • MD5

      cadadcb6719598366e960f31a319a480

    • SHA1

      1d375b97d4d49443e71d68b9d65da8f465c36d3f

    • SHA256

      2afbf92c4db6bbac81cbb782580a4c654d365ce4b8615aadb1bd17adebdcd5bc

    • SHA512

      3c0379fd23d2ea32f1021f36e08517184515ed105c44540c038fd728f125ed7e35d8223fbff020fcb13cb08504874975c631e0fa9cd54bb77eb28ddf8f6edbd9

    • SSDEEP

      24576:v1X3HJwXxPGxIR1ac5Irybw0UoBHgyzMZ97QNbHeR:vJ3HGXx+xIR1ac5I2w017MDyDeR

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks