Overview

overview

10

Static

static

5

12095c5342...08.exe

windows7-x64

10

12095c5342...08.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    12095c5342ee0e243890d024d80541bd263d4959fbb5beb99287b0296df5cf08.exe

  • Size

    326KB

  • Sample

    241219-ajqzdsyqdj

  • MD5

    6f91b80159af9f77bf13e8500a01f070

  • SHA1

    be08ff7dd72534dfa7920ba042fa7e56e6d36ade

  • SHA256

    12095c5342ee0e243890d024d80541bd263d4959fbb5beb99287b0296df5cf08

  • SHA512

    cb93b9715c10e85caa88cea49d955751c9b1bf8c53af139087676ee45626a228fcc2db6d3e84f70307387820e419741dbe2dbc9372da01a4be1b9dc798fc364f

  • SSDEEP

    3072:h0e2A0wxDqUpM5scww4chO+O1BmP5DG0sg3i4XZ9WvDZHwdRX/L+gP38XVH:h0sxD5cwohO+O1sVG0/pZ6iPC86

Score
10/10
modiloaderdiscoverypersistencetrojanupx

Malware Config

Targets

    • Target

      12095c5342ee0e243890d024d80541bd263d4959fbb5beb99287b0296df5cf08.exe

    • Size

      326KB

    • MD5

      6f91b80159af9f77bf13e8500a01f070

    • SHA1

      be08ff7dd72534dfa7920ba042fa7e56e6d36ade

    • SHA256

      12095c5342ee0e243890d024d80541bd263d4959fbb5beb99287b0296df5cf08

    • SHA512

      cb93b9715c10e85caa88cea49d955751c9b1bf8c53af139087676ee45626a228fcc2db6d3e84f70307387820e419741dbe2dbc9372da01a4be1b9dc798fc364f

    • SSDEEP

      3072:h0e2A0wxDqUpM5scww4chO+O1BmP5DG0sg3i4XZ9WvDZHwdRX/L+gP38XVH:h0sxD5cwohO+O1sVG0/pZ6iPC86

    Score
    10/10
    modiloaderdiscoverypersistencetrojanupx

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks