Overview

overview

10

Static

static

3

75dfab65b9...bN.exe

windows7-x64

10

75dfab65b9...bN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    75dfab65b91667baf0655c456d76f425a1c1ce95b76864522735dba9ff3dac4bN

  • Size

    1.5MB

  • Sample

    241103-xkxjws1eqa

  • MD5

    8472f3cd4a8fb11d5d6ffdcbca4fbb60

  • SHA1

    db30302a58528ba5a17c0f495eb44b584fce0662

  • SHA256

    75dfab65b91667baf0655c456d76f425a1c1ce95b76864522735dba9ff3dac4b

  • SHA512

    f5088850c2bceea1390f9ca69618c3bad29d5008817979bc2b05943cb9a6c1fd6de16a0921d68e38d239dd138fe73d06752d8f36906adb9a40abf71d88b84ca3

  • SSDEEP

    24576:gmpXIG2PvZFIbfLS8eUHmKb8GTRw/A4Q1JQp76B76TAV3OLWcZu:7d2Pv3qLreUHP8GkmCE7uAV7Mu

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      75dfab65b91667baf0655c456d76f425a1c1ce95b76864522735dba9ff3dac4bN

    • Size

      1.5MB

    • MD5

      8472f3cd4a8fb11d5d6ffdcbca4fbb60

    • SHA1

      db30302a58528ba5a17c0f495eb44b584fce0662

    • SHA256

      75dfab65b91667baf0655c456d76f425a1c1ce95b76864522735dba9ff3dac4b

    • SHA512

      f5088850c2bceea1390f9ca69618c3bad29d5008817979bc2b05943cb9a6c1fd6de16a0921d68e38d239dd138fe73d06752d8f36906adb9a40abf71d88b84ca3

    • SSDEEP

      24576:gmpXIG2PvZFIbfLS8eUHmKb8GTRw/A4Q1JQp76B76TAV3OLWcZu:7d2Pv3qLreUHP8GkmCE7uAV7Mu

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks