Overview

overview

10

Static

static

5

8091803c5f...5c.exe

windows7-x64

10

8091803c5f...5c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8091803c5f4b3b1faef8325575a6c603c7c3df0130bfa1100e077a4229da785c

  • Size

    90KB

  • Sample

    241208-anh5caxmdr

  • MD5

    c1c8f1d9e6e7f6e58e042c55f8b70211

  • SHA1

    beb6749b1867ccf67fb126aa468d9a19486d8902

  • SHA256

    8091803c5f4b3b1faef8325575a6c603c7c3df0130bfa1100e077a4229da785c

  • SHA512

    1abbe92c1b5a29cc309de4f892090d08a15ecb94d4ba0fc4b79fd0715f77e99f56289ac74a911c9175e8dc146dd2492e4081afc5f38f550e86d12d2e04cc942c

  • SSDEEP

    1536:UiYwjQt6QJvzZsgDIWzm/xsXfv+hYhyQQyV5uv4JBrB7w5VRGulTG1ZCL8nj1oDB:0wjZQJvzZsgsW6/Afv+hYfQIm4/rdE3X

Score
10/10
modiloaderdiscoverypersistencetrojanupx

Malware Config

Targets

    • Target

      8091803c5f4b3b1faef8325575a6c603c7c3df0130bfa1100e077a4229da785c

    • Size

      90KB

    • MD5

      c1c8f1d9e6e7f6e58e042c55f8b70211

    • SHA1

      beb6749b1867ccf67fb126aa468d9a19486d8902

    • SHA256

      8091803c5f4b3b1faef8325575a6c603c7c3df0130bfa1100e077a4229da785c

    • SHA512

      1abbe92c1b5a29cc309de4f892090d08a15ecb94d4ba0fc4b79fd0715f77e99f56289ac74a911c9175e8dc146dd2492e4081afc5f38f550e86d12d2e04cc942c

    • SSDEEP

      1536:UiYwjQt6QJvzZsgDIWzm/xsXfv+hYhyQQyV5uv4JBrB7w5VRGulTG1ZCL8nj1oDB:0wjZQJvzZsgsW6/Afv+hYfQIm4/rdE3X

    Score
    10/10
    modiloaderdiscoverypersistencetrojanupx

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks