Overview

overview

10

Static

static

1

78326473_PDF.cmd

windows7-x64

10

78326473_PDF.cmd

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    78326473_PDF.cmd

  • Size

    6.8MB

  • Sample

    241126-j4ml5sypgp

  • MD5

    2152288a44df543c12a71a50df1ed7b6

  • SHA1

    3d9f4c31f2366d2e75b5d6de5eb790da8bf07f1e

  • SHA256

    08eff0bb7bf2a683834cba1a3602e59ab3e803ce18e2998bd944ad06ec0e2736

  • SHA512

    32558f9fb65ca2adbbd572024f79fee514241b3b5bc35a09e62d0f622955da0f64ab7dd1697621cfa6492095711113408c0b5b619d3beb9fa960746b3ec07b6a

  • SSDEEP

    49152:NL4RD6gKgoYnqvkzd7uTu1DfSYr6EuG+1y3OgKVUGVpxRTw:Y

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      78326473_PDF.cmd

    • Size

      6.8MB

    • MD5

      2152288a44df543c12a71a50df1ed7b6

    • SHA1

      3d9f4c31f2366d2e75b5d6de5eb790da8bf07f1e

    • SHA256

      08eff0bb7bf2a683834cba1a3602e59ab3e803ce18e2998bd944ad06ec0e2736

    • SHA512

      32558f9fb65ca2adbbd572024f79fee514241b3b5bc35a09e62d0f622955da0f64ab7dd1697621cfa6492095711113408c0b5b619d3beb9fa960746b3ec07b6a

    • SSDEEP

      49152:NL4RD6gKgoYnqvkzd7uTu1DfSYr6EuG+1y3OgKVUGVpxRTw:Y

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks