Overview

overview

10

Static

static

3

61d0d8866e...ab.exe

windows7-x64

10

61d0d8866e...ab.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    61d0d8866e74f349b6eb2d4c3c5fb221614aa7c99aa4607cd86830f14845d2ab.exe

  • Size

    1.3MB

  • Sample

    241112-cws1masfqf

  • MD5

    8b6f94521ac60e64b40e778e718122a9

  • SHA1

    b90228c873bd96943d8db718a2421c7e9a32e66a

  • SHA256

    61d0d8866e74f349b6eb2d4c3c5fb221614aa7c99aa4607cd86830f14845d2ab

  • SHA512

    3ad6be629504c89030285572bc9803d44b435fe2332cbf74098e215c2b953e98f353f218c80c27792378bc7fb88fb3638df892ae1f43edd81141bf929bddf09f

  • SSDEEP

    24576:Z2UQlS3rdEooqXXrKZWET6smDKGMYULltywNhRx:8MheZSsmDKxdLltykB

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      61d0d8866e74f349b6eb2d4c3c5fb221614aa7c99aa4607cd86830f14845d2ab.exe

    • Size

      1.3MB

    • MD5

      8b6f94521ac60e64b40e778e718122a9

    • SHA1

      b90228c873bd96943d8db718a2421c7e9a32e66a

    • SHA256

      61d0d8866e74f349b6eb2d4c3c5fb221614aa7c99aa4607cd86830f14845d2ab

    • SHA512

      3ad6be629504c89030285572bc9803d44b435fe2332cbf74098e215c2b953e98f353f218c80c27792378bc7fb88fb3638df892ae1f43edd81141bf929bddf09f

    • SSDEEP

      24576:Z2UQlS3rdEooqXXrKZWET6smDKGMYULltywNhRx:8MheZSsmDKxdLltykB

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks