Overview

overview

10

Static

static

3

e693a1b5bf...48.exe

windows7-x64

10

e693a1b5bf...48.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5b640c4b9b994b4f9407f2b6754cf90ae1f40c6c0cb359003e6f9cf35e4cc10a

  • Size

    378KB

  • Sample

    241121-y1jtea1lgp

  • MD5

    b3551e5e0d7c0ff768675477d97acdde

  • SHA1

    6335e4517dd9acc6cfe3da3f8e52155e2608ac9b

  • SHA256

    5b640c4b9b994b4f9407f2b6754cf90ae1f40c6c0cb359003e6f9cf35e4cc10a

  • SHA512

    7c32fb9ec9aec1263244bea293c37e32a1f1887cbf76bc1a1f85ec5b2e63550d0488099b6cc7da7ea7c13ee8268f83f2103f87a690fdfecaa18f5d97235af681

  • SSDEEP

    6144:t+th5kZ6r+MBdcUnGjHzssaeFOEHDKuszd1iNUhU0/klBrOfS3y6QOSrN5Ro4zwG:ah66CdHUkeuaiNGZArGsNbyN5Ro4zF

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      e693a1b5bf347b87a0ccf9fd4ed164cdf46b9d1ed6a6afde0e4187705edbd148

    • Size

      882KB

    • MD5

      b6e6c8c096cd054c6bcfb5d6bd7ea02e

    • SHA1

      3afb503b54155cdfe593ac60793ae84d92094377

    • SHA256

      e693a1b5bf347b87a0ccf9fd4ed164cdf46b9d1ed6a6afde0e4187705edbd148

    • SHA512

      19fe27f0cc456d6c63c1ccb82dc99234382340f0b3e48b22a6318c9ce76bafd5bf91dccbcd345dac557dd4ed4f4a2a6ae4af382ec76402c161693f865626225c

    • SSDEEP

      12288:F1JL2cht6G8ZeBIkTuuRRt+UrTzXqrWer2wNWHv:FfLQGoeBI9ubhfuaer2wNWHv

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks