Overview

overview

10

Static

static

3

02eec111ba...17.exe

windows7-x64

10

02eec111ba...17.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    02eec111ba55308c1d91c49ee08cb2d6c00d50893596ceef03f7664403175617.exe

  • Size

    1.2MB

  • Sample

    241126-hzx2msxkbl

  • MD5

    1a4d920b70293f85958a9a2cde581f6f

  • SHA1

    756015ae8f1b03f14bc1126e6b2183a383631186

  • SHA256

    02eec111ba55308c1d91c49ee08cb2d6c00d50893596ceef03f7664403175617

  • SHA512

    ceae945e81f37bb3ea8b52177801fd9921b84b63fbb07cac8877544b21dcee136344348adaf09c43d392d1d0b738b5b941e28f96574a8503167b4d00d3c67a2f

  • SSDEEP

    24576:2o8jIfzBmV+MtCxqwFs0beRsSn8T788CRNM:2wf8BZn8TY5

Score
10/10
modiloaderdiscoverypersistencetrojan

Malware Config

Targets

    • Target

      02eec111ba55308c1d91c49ee08cb2d6c00d50893596ceef03f7664403175617.exe

    • Size

      1.2MB

    • MD5

      1a4d920b70293f85958a9a2cde581f6f

    • SHA1

      756015ae8f1b03f14bc1126e6b2183a383631186

    • SHA256

      02eec111ba55308c1d91c49ee08cb2d6c00d50893596ceef03f7664403175617

    • SHA512

      ceae945e81f37bb3ea8b52177801fd9921b84b63fbb07cac8877544b21dcee136344348adaf09c43d392d1d0b738b5b941e28f96574a8503167b4d00d3c67a2f

    • SSDEEP

      24576:2o8jIfzBmV+MtCxqwFs0beRsSn8T788CRNM:2wf8BZn8TY5

    Score
    10/10
    modiloaderdiscoverypersistencetrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks