Overview

overview

10

Static

static

5

753cb3d322...08.exe

windows7-x64

5

753cb3d322...08.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    753cb3d3221259449ac9c48de80af4c1e3f82e229a8fefe014ccdb182a3fe308.exe

  • Size

    130KB

  • Sample

    241124-y6mggstnen

  • MD5

    2c63a141215707fff781f812175a15ac

  • SHA1

    6e66717f80b5a1e04cdb5d527a3154df1e72af0b

  • SHA256

    753cb3d3221259449ac9c48de80af4c1e3f82e229a8fefe014ccdb182a3fe308

  • SHA512

    8a441844838147b565c2a07186198b5066c311eef70412a8564b857c98b4d4f56945fec0d0ec78846781fddfe461d23a874f7becd015fd789b157b3dd1195d06

  • SSDEEP

    1536:eH1ZaQvR1KiX3NK6I+hZhYrt/w5Q6G6IpiRYzz9qJHhhnm0yG5aP/5UROXTmZI:SKQJcinxphkG5Q6GdpIOkJHhKRyOXKW

Score
10/10
modiloaderdiscoverypersistencetrojanupx

Malware Config

Targets

    • Target

      753cb3d3221259449ac9c48de80af4c1e3f82e229a8fefe014ccdb182a3fe308.exe

    • Size

      130KB

    • MD5

      2c63a141215707fff781f812175a15ac

    • SHA1

      6e66717f80b5a1e04cdb5d527a3154df1e72af0b

    • SHA256

      753cb3d3221259449ac9c48de80af4c1e3f82e229a8fefe014ccdb182a3fe308

    • SHA512

      8a441844838147b565c2a07186198b5066c311eef70412a8564b857c98b4d4f56945fec0d0ec78846781fddfe461d23a874f7becd015fd789b157b3dd1195d06

    • SSDEEP

      1536:eH1ZaQvR1KiX3NK6I+hZhYrt/w5Q6G6IpiRYzz9qJHhhnm0yG5aP/5UROXTmZI:SKQJcinxphkG5Q6GdpIOkJHhKRyOXKW

    Score
    10/10
    discoveryupxmodiloaderpersistencetrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks