Overview

overview

10

Static

static

3

x.exe

windows7-x64

10

x.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    x.exe

  • Size

    1.3MB

  • Sample

    241130-tgryfsslfq

  • MD5

    34b4891cc12b3d975ec300a1a846c969

  • SHA1

    b4c1907c74fbf45e91f5a648491ea7a751246d11

  • SHA256

    d39cdd125be8be319e9e290012f8907fbb6dff000199f23eab95e47c3d8d898c

  • SHA512

    21654dce6fd3c65f5b069056f0b5c2ae23f85677b4ed8051696e650606c722ecd0a75ed2333b241cb1f7d7fa6eb6ceaa83a36f64062c0fc8c9f8956bd94dfbb9

  • SSDEEP

    24576:FL1blM9t2yTLishphbtEZ+JNP+jK37K3evi91ei:FLY9Ve+v93Fa9

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      x.exe

    • Size

      1.3MB

    • MD5

      34b4891cc12b3d975ec300a1a846c969

    • SHA1

      b4c1907c74fbf45e91f5a648491ea7a751246d11

    • SHA256

      d39cdd125be8be319e9e290012f8907fbb6dff000199f23eab95e47c3d8d898c

    • SHA512

      21654dce6fd3c65f5b069056f0b5c2ae23f85677b4ed8051696e650606c722ecd0a75ed2333b241cb1f7d7fa6eb6ceaa83a36f64062c0fc8c9f8956bd94dfbb9

    • SSDEEP

      24576:FL1blM9t2yTLishphbtEZ+JNP+jK37K3evi91ei:FLY9Ve+v93Fa9

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks