Overview

overview

10

Static

static

5

72b62cf877...85.exe

windows7-x64

10

72b62cf877...85.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    72b62cf877eedb4d0e00de8d6c989f782533c32f5756599023ac1f52c825cd85

  • Size

    90KB

  • Sample

    241127-atjm3atqcm

  • MD5

    c2f909821caead58602ee5a3f556c9fb

  • SHA1

    aeeb524eab946965ae7be8036a5b2989c70d174f

  • SHA256

    72b62cf877eedb4d0e00de8d6c989f782533c32f5756599023ac1f52c825cd85

  • SHA512

    337846a703dfb1da75bd39ebadfbdc3ae1188894e16c5b40db196e7b110d2a20ca496745463620fece2b78b1aaa2f7e45663d4bdda95111bceeb36b5b9c24f8a

  • SSDEEP

    1536:UiYwjQt6QJvzZsgDIWzm/xsXfv+hYhyQQyV5uv4JBrB7w5VRGulTG1ZCL8nj1oD0:0wjZQJvzZsgsW6/Afv+hYfQIm4/rdE3y

Score
10/10
modiloaderdiscoverypersistencetrojanupx

Malware Config

Targets

    • Target

      72b62cf877eedb4d0e00de8d6c989f782533c32f5756599023ac1f52c825cd85

    • Size

      90KB

    • MD5

      c2f909821caead58602ee5a3f556c9fb

    • SHA1

      aeeb524eab946965ae7be8036a5b2989c70d174f

    • SHA256

      72b62cf877eedb4d0e00de8d6c989f782533c32f5756599023ac1f52c825cd85

    • SHA512

      337846a703dfb1da75bd39ebadfbdc3ae1188894e16c5b40db196e7b110d2a20ca496745463620fece2b78b1aaa2f7e45663d4bdda95111bceeb36b5b9c24f8a

    • SSDEEP

      1536:UiYwjQt6QJvzZsgDIWzm/xsXfv+hYhyQQyV5uv4JBrB7w5VRGulTG1ZCL8nj1oD0:0wjZQJvzZsgsW6/Afv+hYfQIm4/rdE3y

    Score
    10/10
    modiloaderdiscoverypersistencetrojanupx

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks