Overview

overview

10

Static

static

3

Pirkimo uz...as.exe

windows7-x64

10

Pirkimo uz...as.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    12112024_0025_11112024_Pirkimo uzsakymu sarasas.zip

  • Size

    477KB

  • Sample

    241112-aqv7payrgv

  • MD5

    e4b5e5ec0c8a2e4ed190acaafbd6a019

  • SHA1

    35029d12c43ffd07b49d746700617b37cc795230

  • SHA256

    4acd75631b3bf5cdc752b3fbcf290da557c494c6845cb8998650a1e09a40e8cb

  • SHA512

    625df6af44fe3471b0ad965c0e21d5bd181ba5fa516f2ddf026f298030b6657545ee77f8278d5cb641a06335b300d04abdcbd60263d9fc696b5bfe62635700a6

  • SSDEEP

    12288:lN0BUJT4e6V7/7+1ZGRDTaRY3yRkCOhmWEhZYz1XsQ:PqUNK/7q4RDVOq9D

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      Pirkimo uzsakymu sarasas.exe

    • Size

      1.0MB

    • MD5

      324c7cc0801bb21f708800dbea830906

    • SHA1

      7b97a0e78df882a73cef95a2cedd7a87dfa4943b

    • SHA256

      79af3bcefb9140bdcb1801880ef6cdfb7d3658a5f8b8d9acc39eef8a8acce9f7

    • SHA512

      280a4c707fe2683155bebada2f6f75e4623912cf4458a55b7ad787e1f9be0c392823e256357e9db24d4b861981aab88a2e238b6c6f5621e95a2e42edffcb24ca

    • SSDEEP

      24576:/GBqWzMJ3rInJFhR1T6a356ZFlR+gKT44VoIOL7zk:/CHncaUYL6L

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks