Overview

overview

10

Static

static

3

073a1ca920...d4.exe

windows7-x64

10

073a1ca920...d4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    073a1ca920dd4ea967c2b3b875a93064aba05da319ddd5b330bbf48d18a314d4.exe

  • Size

    1.1MB

  • Sample

    241210-xc49rstmcx

  • MD5

    b82af437d62c323d69f73072800355a4

  • SHA1

    9f38efb058e2e931f7768f5eaf173873b954258f

  • SHA256

    073a1ca920dd4ea967c2b3b875a93064aba05da319ddd5b330bbf48d18a314d4

  • SHA512

    ac0fd3d960e3a8ea5d35e02fe1b4df616948f9a40b1b1bb0e42b3d1d941957571fb2e63890163a7acb10c683f5face489307c66e3d2a2422a994e461aa6b1e97

  • SSDEEP

    24576:ypSSRhZFvsEBFumx8eDmCfPVLHhz3eAD4pbSHw/cDKgM3Ty+K8:ypSS7AEBF8eDPNHNxMbSHw/eKgST1b

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      073a1ca920dd4ea967c2b3b875a93064aba05da319ddd5b330bbf48d18a314d4.exe

    • Size

      1.1MB

    • MD5

      b82af437d62c323d69f73072800355a4

    • SHA1

      9f38efb058e2e931f7768f5eaf173873b954258f

    • SHA256

      073a1ca920dd4ea967c2b3b875a93064aba05da319ddd5b330bbf48d18a314d4

    • SHA512

      ac0fd3d960e3a8ea5d35e02fe1b4df616948f9a40b1b1bb0e42b3d1d941957571fb2e63890163a7acb10c683f5face489307c66e3d2a2422a994e461aa6b1e97

    • SSDEEP

      24576:ypSSRhZFvsEBFumx8eDmCfPVLHhz3eAD4pbSHw/cDKgM3Ty+K8:ypSS7AEBF8eDPNHNxMbSHw/eKgST1b

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader First Stage

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks