Overview

overview

10

Static

static

3

ORDER REQ...NY.exe

windows7-x64

10

ORDER REQ...NY.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    18122024_1108_16122024_Advancepayment.rar

  • Size

    365KB

  • Sample

    241218-ngdsyaxqgr

  • MD5

    83ff04c90155f7bbfb0a4afb32fb52f6

  • SHA1

    2bd69c97aa250a94704eb4698423218f303721bc

  • SHA256

    44d3609f5d4ff96205c75bd0b92f66117f37ac1bec16cab7312fba756e9be6b2

  • SHA512

    2a797db99842f3c56b20f219dc5acabe16a91892fcc000a40635365902d19cb36070145a49a4fb56845e1a3a87a692a8ecaf7c48ec4eb8ad52e6f2a63dd56351

  • SSDEEP

    6144:Oq0O+pWsnM5Bnnlbn7ov/ykDdpY2f5CzpTqOVGy0SLBne0Hr5VN7fqDbDOxLrndA:OqqVeFh70hpXf8zpTtVGyy0Hr5TOqBWP

Score
10/10
modiloaderdiscoverypersistencetrojan

Malware Config

Targets

    • Target

      ORDER REQUIRED DETAILS FOR COMPANY.exe

    • Size

      930KB

    • MD5

      3e0497676ffe40cc443ac29438f92b18

    • SHA1

      042b14a498d9f8c2c7ad2a1127710e5e3361342e

    • SHA256

      89882ef5b9491ab9897666dd3fa56f738a84e2ec474099e7564c78e562b91035

    • SHA512

      5ada0f1b33fa0709302b8da2e33d23c549ba53442d9159cb6941f05b4f31dae9776bf3984545c1391bfdd1d196708a7eee7f341278d3c079235d59068dd76ec9

    • SSDEEP

      24576:R7sP5Kw0G1OAc8msbN0o2IDGHfPMFQJQI/zN:R8o9G1bTcfPMFQJQI/zN

    Score
    10/10
    modiloaderdiscoverytrojanpersistence

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks