Overview

overview

10

Static

static

3

Quotation Sheet.exe

windows7-x64

10

Quotation Sheet.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a8b54cf1bf0346ff6b6a8f3b9b6dd92e15504d29ae227b32459638e5b5981f07

  • Size

    493KB

  • Sample

    241202-c359jazqbq

  • MD5

    0b4bcde681c93f69d4e4fecc9740f379

  • SHA1

    9a199ef2cd6e6e3b81df7f8fe1ba13ecb9bc5680

  • SHA256

    a8b54cf1bf0346ff6b6a8f3b9b6dd92e15504d29ae227b32459638e5b5981f07

  • SHA512

    97164028dd6badf3732c383e26946a4b8c8428e31781ceff1688eac481eab86fc85a598cb09daa2b8cf79e8543e4104e33849701936078033ea823fc5ea193cb

  • SSDEEP

    12288:DzGQtEaZuaObPCpZQs3+GWDZpM0z+8WXkBy00k:/G0fOb0ZNxIZSf8WXkBL

Score
10/10
modiloaderdiscoverypersistencetrojan

Malware Config

Targets

    • Target

      Quotation Sheet.exe

    • Size

      1.1MB

    • MD5

      7c5e45ac8e88413f7333883f1f1d9178

    • SHA1

      0d782bbf26359f979fdb03c522539d09c6b0c7fd

    • SHA256

      7bef65a6b0f836f5f07258aab20affe1c8e46723d0d95aa706a5e183bf3211c1

    • SHA512

      07a88929371b48bf31ed1c3fccd1a3b25c485b813acfedcc701253738a804952b0bc14988c5ccbd10dfe0f912e38ecc1a45f1fbf396a61e0dd8bb66051859dd1

    • SSDEEP

      24576:5I9pJ5mpNWV6PIbS2IpJ3If7SeWybiZFIOnSo:5IDm/xef7SeWFZ6O

    Score
    10/10
    modiloaderdiscoverytrojanpersistence

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks