Overview

overview

10

Static

static

3

ffa11ee3e8...9N.exe

windows7-x64

10

ffa11ee3e8...9N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ffa11ee3e862bc4209ae9803fed72fb38b9599e1aba8e39077a1261a71ca8559N.exe

  • Size

    1.1MB

  • Sample

    241204-k37fla1ket

  • MD5

    17dc6005cb64b47808391c1e59eb6c90

  • SHA1

    394a75745f0b852b926d31a97d069783bad83044

  • SHA256

    ffa11ee3e862bc4209ae9803fed72fb38b9599e1aba8e39077a1261a71ca8559

  • SHA512

    e7cce53621e1b6193d255fea2ab4c59b738149010b401c9915c2e9906af28a3aa84cd824520f2afc9a4ef6fae17139441f3f3210480ff865a9a857ba736f4a5c

  • SSDEEP

    24576:w9IrPEUBIh+J+vDNSTG2bydfpRBcK/F50V2yZp5ivUo:weYcrpUvBcK/F222p5K

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      ffa11ee3e862bc4209ae9803fed72fb38b9599e1aba8e39077a1261a71ca8559N.exe

    • Size

      1.1MB

    • MD5

      17dc6005cb64b47808391c1e59eb6c90

    • SHA1

      394a75745f0b852b926d31a97d069783bad83044

    • SHA256

      ffa11ee3e862bc4209ae9803fed72fb38b9599e1aba8e39077a1261a71ca8559

    • SHA512

      e7cce53621e1b6193d255fea2ab4c59b738149010b401c9915c2e9906af28a3aa84cd824520f2afc9a4ef6fae17139441f3f3210480ff865a9a857ba736f4a5c

    • SSDEEP

      24576:w9IrPEUBIh+J+vDNSTG2bydfpRBcK/F50V2yZp5ivUo:weYcrpUvBcK/F222p5K

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks