Overview

overview

10

Static

static

3

473cb307c2...1N.exe

windows7-x64

10

473cb307c2...1N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    473cb307c2f2c4e3e7cd8ddaf5e656cd8ea7fd7388708704568d5abb91b3a141N.exe

  • Size

    112KB

  • Sample

    241226-srh8maylhx

  • MD5

    d015cee6dad5ea1114970c13eeff07e0

  • SHA1

    52370e442b2f36ad70b04ab00d4e93f90272dfe4

  • SHA256

    473cb307c2f2c4e3e7cd8ddaf5e656cd8ea7fd7388708704568d5abb91b3a141

  • SHA512

    5f0b506f9ca41a76ca16efa9a43ef25bcf358908b63b9e3bd89708a06529b70d2188afd596c512b66eefa3b248ad02869757e4b3be420d780d048ffdaf2b4497

  • SSDEEP

    1536:t2ovIa47CqIf2f3w41p7sDcX7juR/JSJw8EeNshUDGXJC:tVIr7zI+fAceoGxSKKo5C

Score
10/10
modiloaderdiscoverypersistencetrojanupx

Malware Config

Targets

    • Target

      473cb307c2f2c4e3e7cd8ddaf5e656cd8ea7fd7388708704568d5abb91b3a141N.exe

    • Size

      112KB

    • MD5

      d015cee6dad5ea1114970c13eeff07e0

    • SHA1

      52370e442b2f36ad70b04ab00d4e93f90272dfe4

    • SHA256

      473cb307c2f2c4e3e7cd8ddaf5e656cd8ea7fd7388708704568d5abb91b3a141

    • SHA512

      5f0b506f9ca41a76ca16efa9a43ef25bcf358908b63b9e3bd89708a06529b70d2188afd596c512b66eefa3b248ad02869757e4b3be420d780d048ffdaf2b4497

    • SSDEEP

      1536:t2ovIa47CqIf2f3w41p7sDcX7juR/JSJw8EeNshUDGXJC:tVIr7zI+fAceoGxSKKo5C

    Score
    10/10
    modiloaderdiscoverypersistencetrojanupx

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks