Overview

overview

10

Static

static

5

bb2d7d79b0...93.exe

windows7-x64

10

bb2d7d79b0...93.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bb2d7d79b0b7abd7d80052aab219cdce5d9625c98c0af416f795e1e001332a93.exe

  • Size

    90KB

  • Sample

    241217-2772csska1

  • MD5

    6690ce2b6e4bd5f705305ef10927e9b0

  • SHA1

    4a42987613ad2331b9694720b30fd64283c30e29

  • SHA256

    bb2d7d79b0b7abd7d80052aab219cdce5d9625c98c0af416f795e1e001332a93

  • SHA512

    96a74a7634bf96aff5c9ef2b70c4ef98b193b443b9b9919a6183ae7d088f649678816d17428adeea070cce53e580fd34bf328dcf376d032739ea054d91a54bf3

  • SSDEEP

    1536:UiYwjQt6QJvzZsgDIWzm/xsXfv+hYhyQQyV5uv4JBrB7w5VRGulTG1ZCL8nj1oDk:0wjZQJvzZsgsW6/Afv+hYfQIm4/rdE3u

Score
10/10
modiloaderdiscoverypersistencetrojanupx

Malware Config

Targets

    • Target

      bb2d7d79b0b7abd7d80052aab219cdce5d9625c98c0af416f795e1e001332a93.exe

    • Size

      90KB

    • MD5

      6690ce2b6e4bd5f705305ef10927e9b0

    • SHA1

      4a42987613ad2331b9694720b30fd64283c30e29

    • SHA256

      bb2d7d79b0b7abd7d80052aab219cdce5d9625c98c0af416f795e1e001332a93

    • SHA512

      96a74a7634bf96aff5c9ef2b70c4ef98b193b443b9b9919a6183ae7d088f649678816d17428adeea070cce53e580fd34bf328dcf376d032739ea054d91a54bf3

    • SSDEEP

      1536:UiYwjQt6QJvzZsgDIWzm/xsXfv+hYhyQQyV5uv4JBrB7w5VRGulTG1ZCL8nj1oDk:0wjZQJvzZsgsW6/Afv+hYfQIm4/rdE3u

    Score
    10/10
    modiloaderdiscoverypersistencetrojanupx

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks