Overview

overview

10

Static

static

3

PROCUREMEN...ER.exe

windows7-x64

10

PROCUREMEN...ER.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0b3f1956251284c292dd19aff35e8724eef1b10ea580cf8755de387e6add2ad2.rar

  • Size

    598KB

  • Sample

    241220-clfybaxkdn

  • MD5

    3eb4ed7efec64725e9037cc0afbb64dc

  • SHA1

    092fb65b0e6d2bf55f72cb919b316a5944c3c13f

  • SHA256

    0b3f1956251284c292dd19aff35e8724eef1b10ea580cf8755de387e6add2ad2

  • SHA512

    a8798b11b918c5de3979ce34de99dc135f2e8f566826317c37518b321d3581d90ecda2f784fa890bcc0cb8ef2de0b2352e08a6eafb4490248906df179a7baa1c

  • SSDEEP

    12288:JEVvUXkM7A1R7bHZaCxltn7R+ebgD8aGFlXbDOKcwiKO40j+qsrich:VXkMM1xbHZaCxltMHwagl+JtKOQqsph

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      PROCUREMENT ADVICE AND ORDER.exe

    • Size

      1.3MB

    • MD5

      885b30bae5152a5857afed3ee0a20486

    • SHA1

      d888950686cf246a5e29a8db79014a0d8680f056

    • SHA256

      980ca560bfecf5e6e629612390fb3210a9767c64574ef1afd18fc5f310634d29

    • SHA512

      9dac731d64d7f61653ad02c6a9e18b6ad88a04117e5e92964498a85d9ebba7adde933953fb0b35dc16b4abc2d07947242f26f658f0bafcfa38ec45d78f094878

    • SSDEEP

      24576:TS1gzTBokW3THfYl7JTOs1r7FX2DOfqDrKfK8r/4mSwhOSqR:TtTiq973f

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks