Overview

overview

10

Static

static

10

Server-.bin.exe

windows7-x64

10

Server-.bin.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Server-.bin.zip

  • Size

    128KB

  • Sample

    241218-l4yqhsvrgj

  • MD5

    3327d556fe62103dadd2e47a7a7e1ec0

  • SHA1

    59b69c5d5124c267feb98970d18611f1e0c8d1c5

  • SHA256

    438596621e281d55185f8e8326adf85e28f2dca29d65f78196e98b8b755d8ec0

  • SHA512

    c01c7ea507e80c61346d534933975f0d057944b8d27b33969aafb861eef7c451d9bd16676b7f46edda7b4de64587a9f9134f6ef2d800beed3031e01d2fdd2805

  • SSDEEP

    3072:b6RpNWHuOoyghgJHhcWJFjafYmSZBem9jjDatgWAZla:b64H7oyg+n9FjawmIMmotFOU

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      Server-.bin.exe

    • Size

      148KB

    • MD5

      604c81a33767526faf59ec73a8f8825f

    • SHA1

      2254f2dbdee9b97f26df1ee21f48c233e8ff517f

    • SHA256

      fc001455a44ff5531e58dcdc745d57547843722c198122d4001fca7a0341076b

    • SHA512

      cd4635d4dce670f0ed0a4b21809ae3f419b6dcb8e1a47c0d312fcc51b0772cbdff6a0cde1b1e8d2b5466ec6ad2c71486b7276370e96d88fd11dda465d8a588e7

    • SSDEEP

      3072:mVA+xbfCuL0nTnXjj62f2rM4vks8nU3mhWlIj2Y/8I:mBfCuAnTXjj62b4v18UqwgX8I

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks