modiloader | 0a5fe8fa4cfc78fb97f1445c14aa4f5f3e2067bae2379f7a415a48bb55aa838d | Triage

Sharing

General

Target

0a5fe8fa4cfc78fb97f1445c14aa4f5f3e2067bae2379f7a415a48bb55aa838dN
Size

1.0MB
Sample

240920-psxkvswglb
MD5

6ac7ad30b34c09069dcbbf914894f350
SHA1

f84bbbd747cd145ef09b02ae975ec8450a67d516
SHA256

0a5fe8fa4cfc78fb97f1445c14aa4f5f3e2067bae2379f7a415a48bb55aa838d
SHA512

9eaf1d1522dafcd8e346a68c8715086b34791c630776841faa4835f66af1b28eb772f00bef6cf40abc09fbb43a996b711a7778d380921ab56be1a7af5c40fe0b
SSDEEP

24576:dEQiP5m51kWPYQLd5bQRM1a8DFW46dF1imLD9:da2zYkI8DFKn1imLp

Score

10^/10

modiloader discovery persistence trojan

Malware Config

Targets

- Target
  
  0a5fe8fa4cfc78fb97f1445c14aa4f5f3e2067bae2379f7a415a48bb55aa838dN
- Size
  
  1.0MB
- MD5
  
  6ac7ad30b34c09069dcbbf914894f350
- SHA1
  
  f84bbbd747cd145ef09b02ae975ec8450a67d516
- SHA256
  
  0a5fe8fa4cfc78fb97f1445c14aa4f5f3e2067bae2379f7a415a48bb55aa838d
- SHA512
  
  9eaf1d1522dafcd8e346a68c8715086b34791c630776841faa4835f66af1b28eb772f00bef6cf40abc09fbb43a996b711a7778d380921ab56be1a7af5c40fe0b
- SSDEEP
  
  24576:dEQiP5m51kWPYQLd5bQRM1a8DFW46dF1imLD9:da2zYkI8DFKn1imLp
Score

10^/10

modiloader discovery trojan persistence
- ModiLoader, DBatLoader
  ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
  trojan modiloader
- ModiLoader Second Stage
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

modiloaderdiscoverytrojan

behavioral2

modiloaderdiscoverypersistencetrojan