Overview

overview

10

Static

static

3

PL_V20KD52...ed.exe

windows7-x64

10

PL_V20KD52...ed.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    978a9be2cb8a9bd0563adaee3805d338e4d6a201c47e9e7b6c273630139d3e84

  • Size

    203KB

  • Sample

    241121-y2dc1s1mbl

  • MD5

    7298c831aee4ed37eb0dc9df66859a45

  • SHA1

    de0c700ff23521ad112113e9dcde0827059a7ccd

  • SHA256

    978a9be2cb8a9bd0563adaee3805d338e4d6a201c47e9e7b6c273630139d3e84

  • SHA512

    ba181f63a2caec6f7c73bbbe85b1bcfeb224febdd1eb13c730e3a19c61e14df854db7cf1d1d688e92e8fe8109ed753f8f07e5ab3c94f4fd54a3d86678381532d

  • SSDEEP

    3072:dluatLxAGiIM268cZZq30nOUk/Fa4fg6/tfCucKC3++dl3W6EsEJax3oS:dJLex7Z5FnOU6FZfJ/ncKCJdlmLsz3/

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      PL_V20KD5244_Signed.exe

    • Size

      535KB

    • MD5

      8927e39e27475a25baaf12dbcf77c5d3

    • SHA1

      b4c0d4e584f593820d75ca94953e5505fb22ee4a

    • SHA256

      1ed0557d366f64bd2fb0f689acd83702e954fe250ed6eafc0b7b42ad85a2ef11

    • SHA512

      31cb70ff0972d3644a31c52915600ab493cecd9c8c1d3e4bc68ba386c90fd3f870459cf9012209191853b053b881592f5264a03f577bd4b9c02599388ed91efe

    • SSDEEP

      12288:/YpY45z2fWMwUhP48sQaAZNjSiuPBR5lpbTYweQ:/UYW2fWM1hkQzZRSBRs

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks