Overview

overview

10

Static

static

1

USD 12_371...rt.exe

windows7-x64

10

USD 12_371...rt.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    11c44f0d08180e0988d0fd62590e188a131ad264b6c98799ce61769af8e11a56

  • Size

    314KB

  • Sample

    241122-jjq4tsspck

  • MD5

    f3371fcb6ffabc228ee298da96a79797

  • SHA1

    faa02f84d6617bcab14b5d102fe52b70d38b3f15

  • SHA256

    11c44f0d08180e0988d0fd62590e188a131ad264b6c98799ce61769af8e11a56

  • SHA512

    7706e238eb4aa9aae18a445f22b997cce0cf6127ec1c1eeb700e0b3f0683ec6ebf28d2c194dc929aa3b9bf5ad01aa7be67db4d45fb1e678741e3a18f62fddaaf

  • SSDEEP

    6144:SIPHznqwzsFO2xthDWpXQIwM0wmaE9iupkmVXYt1xlXc:HDzYkoOawmaYk6Yt1HXc

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      USD 12_371.35 SWIFT report.bin

    • Size

      740KB

    • MD5

      064a51fe70b2fe972c704f8d9a5e9a3d

    • SHA1

      c3623078edc8673f2337e840869b02cfed3d64e2

    • SHA256

      047ca53bf616a52ba6946c0a6cf6676a3030b0baf6d987b6268203caebd87b74

    • SHA512

      2f7d07d8cb0965e160d6d5a6ded896e0042c8f06d61a080108813740cf56580eae55245c89d48a1f5dc551d416f3d0969d5c6a50f7126436cf3f9406773b7924

    • SSDEEP

      12288:+TnjcRRQA6nHTLYhi3pw45sVUTpVnb7x3VYq/:+Tj66nHTb9QUTppb7x3+U

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks