Overview

overview

10

Static

static

3

545144737c...dN.exe

windows7-x64

10

545144737c...dN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    545144737c64e9ba29f799a58c81a79131361e5754c423fca7c0394f46f2939dN.exe

  • Size

    724KB

  • Sample

    241205-ed27patken

  • MD5

    b6ac631bfeda3b4a32058b4b7763ead0

  • SHA1

    8743eaf53f9851494b8b347044c88a3b1618c7b4

  • SHA256

    545144737c64e9ba29f799a58c81a79131361e5754c423fca7c0394f46f2939d

  • SHA512

    820e763043347b0b3c2e11ee984ae1f11fa29335df807d7d608f9a457403a034173e08314d026bd71e971e3b5f9571acbc1b0a30f9e3739ab07f7151bbff6ef6

  • SSDEEP

    12288:9c//////XhHkFJ2PSwVIghpSZHzudJgdmthwKAYb5jYE541xIAZDnzyh6:9c//////XhEFCfzSNz2ujcWE541xIAFF

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      545144737c64e9ba29f799a58c81a79131361e5754c423fca7c0394f46f2939dN.exe

    • Size

      724KB

    • MD5

      b6ac631bfeda3b4a32058b4b7763ead0

    • SHA1

      8743eaf53f9851494b8b347044c88a3b1618c7b4

    • SHA256

      545144737c64e9ba29f799a58c81a79131361e5754c423fca7c0394f46f2939d

    • SHA512

      820e763043347b0b3c2e11ee984ae1f11fa29335df807d7d608f9a457403a034173e08314d026bd71e971e3b5f9571acbc1b0a30f9e3739ab07f7151bbff6ef6

    • SSDEEP

      12288:9c//////XhHkFJ2PSwVIghpSZHzudJgdmthwKAYb5jYE541xIAZDnzyh6:9c//////XhEFCfzSNz2ujcWE541xIAFF

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks