Overview

overview

10

Static

static

1

USD470900_...DF.bat

windows7-x64

10

USD470900_...DF.bat

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    USD470900_COPY_800BLHSBC882001.PDF.bat

  • Size

    3.2MB

  • Sample

    241120-hm4cwsterr

  • MD5

    c96743116088d21b52516f16f4866f69

  • SHA1

    9b9d500993f74ed975945419b6a25c03e80d8400

  • SHA256

    58348cc94b984ca026fa0a319b93ac988a394ed3d5ec39c01c47a8e762ebdb16

  • SHA512

    1a7520b8de10e9fb71f18f22287e298f25743a26ea946e71fb3b895bb8679f86986fe2b0ec30a0d7589cd85af404eca27d8ccf2a47f895f9c166c55660a8edd0

  • SSDEEP

    24576:PdLbg3tuCmhfOs2TLie3m0nKaf5ohA87eR4xGVPTXJF7wb2l+qCWuj8lzoQjJpcp:PR03turhfwL8uJFlEoNZHk

Score
10/10
modiloaderdiscoverypersistencetrojan

Malware Config

Targets

    • Target

      USD470900_COPY_800BLHSBC882001.PDF.bat

    • Size

      3.2MB

    • MD5

      c96743116088d21b52516f16f4866f69

    • SHA1

      9b9d500993f74ed975945419b6a25c03e80d8400

    • SHA256

      58348cc94b984ca026fa0a319b93ac988a394ed3d5ec39c01c47a8e762ebdb16

    • SHA512

      1a7520b8de10e9fb71f18f22287e298f25743a26ea946e71fb3b895bb8679f86986fe2b0ec30a0d7589cd85af404eca27d8ccf2a47f895f9c166c55660a8edd0

    • SSDEEP

      24576:PdLbg3tuCmhfOs2TLie3m0nKaf5ohA87eR4xGVPTXJF7wb2l+qCWuj8lzoQjJpcp:PR03turhfwL8uJFlEoNZHk

    Score
    10/10
    modiloaderdiscoverypersistencetrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks