Overview

overview

10

Static

static

1

4e21d570ea...d1.cmd

windows7-x64

10

4e21d570ea...d1.cmd

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4e21d570eaf8ad3a0f5e76e168aad06f22d8f62a6d5d62647d8df9a2938d7fd1.cmd

  • Size

    6.3MB

  • Sample

    241107-cvfc5swjak

  • MD5

    1941c21bdae085a333ca4e3adbb4e743

  • SHA1

    896a4de9d86e6f63c5b6eae0d036a32ad52b9910

  • SHA256

    4e21d570eaf8ad3a0f5e76e168aad06f22d8f62a6d5d62647d8df9a2938d7fd1

  • SHA512

    07766b8645f7649f8a581a24887886ff8aafc367ac85860cd80665d62ef67999066e2561e085a14bd2f9fbad32c963b72f4415081999911c14176598fda78f22

  • SSDEEP

    49152:uTw00WKvz5IxwmP6bPrOpl1ZHgafZ3GkCmNLKFSLsyhk1yZNvlTeyNdaurdPD59L:m

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      4e21d570eaf8ad3a0f5e76e168aad06f22d8f62a6d5d62647d8df9a2938d7fd1.cmd

    • Size

      6.3MB

    • MD5

      1941c21bdae085a333ca4e3adbb4e743

    • SHA1

      896a4de9d86e6f63c5b6eae0d036a32ad52b9910

    • SHA256

      4e21d570eaf8ad3a0f5e76e168aad06f22d8f62a6d5d62647d8df9a2938d7fd1

    • SHA512

      07766b8645f7649f8a581a24887886ff8aafc367ac85860cd80665d62ef67999066e2561e085a14bd2f9fbad32c963b72f4415081999911c14176598fda78f22

    • SSDEEP

      49152:uTw00WKvz5IxwmP6bPrOpl1ZHgafZ3GkCmNLKFSLsyhk1yZNvlTeyNdaurdPD59L:m

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks