Overview

overview

10

Static

static

1

22112024_0...ia.bat

windows7-x64

10

22112024_0...ia.bat

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    22112024_0208_Documentazione_Doganale_richieste_di_copia.bat

  • Size

    3.4MB

  • Sample

    241122-cknlrsyjbl

  • MD5

    e83eaefa47746764ed0708da11cf890f

  • SHA1

    5986d2e1da1d6fa42825ae627ee688cac4530fd7

  • SHA256

    13e2c237c2fa5b146ada50ad1be0be71832e42b745f2bc82daa52558807a7aa6

  • SHA512

    d69fe44a64af8693c5d15dcc0d3773e3b30da540f90be0ba3addd1bbcf99c26632572f1a4eccf1838ac60da4e0d27b5700a4ebeeac8448f3c822e67399a9d251

  • SSDEEP

    49152:f6DzaZKYLJqhTLqP8gTM0BiuWSIRbWRIi9b:v

Score
10/10
modiloaderdiscoverypersistencetrojan

Malware Config

Targets

    • Target

      22112024_0208_Documentazione_Doganale_richieste_di_copia.bat

    • Size

      3.4MB

    • MD5

      e83eaefa47746764ed0708da11cf890f

    • SHA1

      5986d2e1da1d6fa42825ae627ee688cac4530fd7

    • SHA256

      13e2c237c2fa5b146ada50ad1be0be71832e42b745f2bc82daa52558807a7aa6

    • SHA512

      d69fe44a64af8693c5d15dcc0d3773e3b30da540f90be0ba3addd1bbcf99c26632572f1a4eccf1838ac60da4e0d27b5700a4ebeeac8448f3c822e67399a9d251

    • SSDEEP

      49152:f6DzaZKYLJqhTLqP8gTM0BiuWSIRbWRIi9b:v

    Score
    10/10
    modiloaderdiscoverytrojanpersistence

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks