Overview

overview

10

Static

static

3

spoolsv.COM.exe

windows7-x64

10

spoolsv.COM.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    spoolsv.COM.exe

  • Size

    995KB

  • Sample

    241223-gqwlsaxjgr

  • MD5

    dfd15a4158ab979660435d6f3e95a3ec

  • SHA1

    6d5566cddfb4b99e82a6babdbd4536a24e8f6f73

  • SHA256

    baa12b649fddd77ef62ecd2b3169fab9bb5fbe78404175485f9a7fb48dc4456d

  • SHA512

    f33677b419f307c8970c0024e45162bc83e63141878ec2d15b59011261cb30aa412076b62b80fd4e9b99713a689c10699ea8682f67754b2569c83b22b1225e02

  • SSDEEP

    24576:Mt8U4ln77mcFj7LF6iNQj0KyEB1zcwfPM6d:0wnRQj0KyEB1zcwfPMA

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      spoolsv.COM.exe

    • Size

      995KB

    • MD5

      dfd15a4158ab979660435d6f3e95a3ec

    • SHA1

      6d5566cddfb4b99e82a6babdbd4536a24e8f6f73

    • SHA256

      baa12b649fddd77ef62ecd2b3169fab9bb5fbe78404175485f9a7fb48dc4456d

    • SHA512

      f33677b419f307c8970c0024e45162bc83e63141878ec2d15b59011261cb30aa412076b62b80fd4e9b99713a689c10699ea8682f67754b2569c83b22b1225e02

    • SSDEEP

      24576:Mt8U4ln77mcFj7LF6iNQj0KyEB1zcwfPM6d:0wnRQj0KyEB1zcwfPMA

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks