Overview

overview

10

Static

static

10

0dc66a443f...0N.exe

windows7-x64

10

0dc66a443f...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0dc66a443fde5dd32d6a72a39d5da99559e0ead9a3f5b527700f3973d0065120N.exe

  • Size

    2.0MB

  • Sample

    241226-knpbga1pgj

  • MD5

    35c68e28e4e66c129287b498f11c0fa0

  • SHA1

    3bbd6cbc6886b1c0a6dbb0a46892c8672726c4b5

  • SHA256

    0dc66a443fde5dd32d6a72a39d5da99559e0ead9a3f5b527700f3973d0065120

  • SHA512

    f0d002416711d63ad0fac62887da759db41ea818143fe241945f8a041c7c7ccca52b7ce3939e67487db8338ded0762a7c09ced9a39861957b71567ed8b42dfcf

  • SSDEEP

    3072:7ymWUDof3tPw6id8wgRgPqnEyMVX1bbXm8p8qDeWnVKez6KNXNOrsza3rSy2C2YF:7BWEoPZCErEl1bbj3I

Score
10/10
modiloaderdiscoverytrojanupx

Malware Config

Targets

    • Target

      0dc66a443fde5dd32d6a72a39d5da99559e0ead9a3f5b527700f3973d0065120N.exe

    • Size

      2.0MB

    • MD5

      35c68e28e4e66c129287b498f11c0fa0

    • SHA1

      3bbd6cbc6886b1c0a6dbb0a46892c8672726c4b5

    • SHA256

      0dc66a443fde5dd32d6a72a39d5da99559e0ead9a3f5b527700f3973d0065120

    • SHA512

      f0d002416711d63ad0fac62887da759db41ea818143fe241945f8a041c7c7ccca52b7ce3939e67487db8338ded0762a7c09ced9a39861957b71567ed8b42dfcf

    • SSDEEP

      3072:7ymWUDof3tPw6id8wgRgPqnEyMVX1bbXm8p8qDeWnVKez6KNXNOrsza3rSy2C2YF:7BWEoPZCErEl1bbj3I

    Score
    10/10
    modiloadertrojanupxdiscovery

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks