Overview

overview

10

Static

static

5

7d88a15988...0N.exe

windows7-x64

10

7d88a15988...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7d88a15988e2e2ee8c36c0db130512f807319b62cd7b7ede2792133ada61dbe0N.exe

  • Size

    326KB

  • Sample

    241216-n3jlbazjft

  • MD5

    7de82f1f2f38dc3b8de6270569f43980

  • SHA1

    148230bb4f9287d48402fcb44a48770c22754531

  • SHA256

    7d88a15988e2e2ee8c36c0db130512f807319b62cd7b7ede2792133ada61dbe0

  • SHA512

    94f31308f1ea2cf7f4f0276f837413cf2f31b4e1cf67fb6bb1c036cd13ba414eeb1dfb6334f7de964b1320c6252fa47bd6cf46850b6c3a0731ba5f2c934e6f0b

  • SSDEEP

    3072:ce2A0wxDqUpM5scww4chO+O1BmP5DG0sg3i4XZ9WvDZHwdRX/L+gP38XVP:csxD5cwohO+O1sVG0/pZ6iPC8K

Score
10/10
modiloaderdiscoverypersistencetrojanupx

Malware Config

Targets

    • Target

      7d88a15988e2e2ee8c36c0db130512f807319b62cd7b7ede2792133ada61dbe0N.exe

    • Size

      326KB

    • MD5

      7de82f1f2f38dc3b8de6270569f43980

    • SHA1

      148230bb4f9287d48402fcb44a48770c22754531

    • SHA256

      7d88a15988e2e2ee8c36c0db130512f807319b62cd7b7ede2792133ada61dbe0

    • SHA512

      94f31308f1ea2cf7f4f0276f837413cf2f31b4e1cf67fb6bb1c036cd13ba414eeb1dfb6334f7de964b1320c6252fa47bd6cf46850b6c3a0731ba5f2c934e6f0b

    • SSDEEP

      3072:ce2A0wxDqUpM5scww4chO+O1BmP5DG0sg3i4XZ9WvDZHwdRX/L+gP38XVP:csxD5cwohO+O1sVG0/pZ6iPC8K

    Score
    10/10
    modiloaderdiscoverypersistencetrojanupx

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks