Overview

overview

10

Static

static

5

e902231e90...8N.exe

windows7-x64

10

e902231e90...8N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e902231e90424fd1f4a345d8efe0206e5162385afeb4a0935d5019912ed24218N

  • Size

    90KB

  • Sample

    241108-atna9atmhr

  • MD5

    997c3b282954b106bd90fe4ef6b7d320

  • SHA1

    57506878249425221d9322b73572c7316dec7da6

  • SHA256

    e902231e90424fd1f4a345d8efe0206e5162385afeb4a0935d5019912ed24218

  • SHA512

    c6cab19841e87bed3d4610f9626741b19a077f08a63be4a4fb3f4be73a641d25575123ad5da85178deb18f289cb57e7d73b988e692be33ab7bfc9d5fb4551e8e

  • SSDEEP

    1536:UiYwjQt6QJvzZsgDIWzm/xsXfv+hYhyQQyV5uv4JBrB7w5VRGulTG1ZCL8nj1oDK:0wjZQJvzZsgsW6/Afv+hYfQIm4/rdE3Y

Score
10/10
modiloaderdiscoverypersistencetrojanupx

Malware Config

Targets

    • Target

      e902231e90424fd1f4a345d8efe0206e5162385afeb4a0935d5019912ed24218N

    • Size

      90KB

    • MD5

      997c3b282954b106bd90fe4ef6b7d320

    • SHA1

      57506878249425221d9322b73572c7316dec7da6

    • SHA256

      e902231e90424fd1f4a345d8efe0206e5162385afeb4a0935d5019912ed24218

    • SHA512

      c6cab19841e87bed3d4610f9626741b19a077f08a63be4a4fb3f4be73a641d25575123ad5da85178deb18f289cb57e7d73b988e692be33ab7bfc9d5fb4551e8e

    • SSDEEP

      1536:UiYwjQt6QJvzZsgDIWzm/xsXfv+hYhyQQyV5uv4JBrB7w5VRGulTG1ZCL8nj1oDK:0wjZQJvzZsgsW6/Afv+hYfQIm4/rdE3Y

    Score
    10/10
    modiloaderdiscoverypersistencetrojanupx

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks