Overview

overview

10

Static

static

3

39056f4dab...aN.exe

windows7-x64

10

39056f4dab...aN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    39056f4dabb6c9efacf106b733024d1a22736e6379cd2198cb37a8afbf247aaaN.exe

  • Size

    769KB

  • Sample

    241130-rqfknszqdk

  • MD5

    963a9fe267ddfa91c59eb7dbf190f270

  • SHA1

    9ad43dcbd971d42ebfdba067117f937cd0cb8a7b

  • SHA256

    39056f4dabb6c9efacf106b733024d1a22736e6379cd2198cb37a8afbf247aaa

  • SHA512

    0a095c3c30e6fb72fc98706c70e1a2faf164a17d86e87229caffac5c8ca545de19cf02975b7db3c3a36e56c807c77dbebce7107a29718e200e31dff7b3ab1157

  • SSDEEP

    12288:sYC5c18DJqoXVIaRnEFRjYHhCrAaVyly7iVPuNUNc3syNR40CXHKEHoob:Z6JXVFZ2ihUHVyc7iVPbNcO3XHK6b

Score
10/10
modiloaderdiscoverypersistencetrojan

Malware Config

Targets

    • Target

      39056f4dabb6c9efacf106b733024d1a22736e6379cd2198cb37a8afbf247aaaN.exe

    • Size

      769KB

    • MD5

      963a9fe267ddfa91c59eb7dbf190f270

    • SHA1

      9ad43dcbd971d42ebfdba067117f937cd0cb8a7b

    • SHA256

      39056f4dabb6c9efacf106b733024d1a22736e6379cd2198cb37a8afbf247aaa

    • SHA512

      0a095c3c30e6fb72fc98706c70e1a2faf164a17d86e87229caffac5c8ca545de19cf02975b7db3c3a36e56c807c77dbebce7107a29718e200e31dff7b3ab1157

    • SSDEEP

      12288:sYC5c18DJqoXVIaRnEFRjYHhCrAaVyly7iVPuNUNc3syNR40CXHKEHoob:Z6JXVFZ2ihUHVyc7iVPbNcO3XHK6b

    Score
    10/10
    modiloaderdiscoverypersistencetrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks