Overview

overview

10

Static

static

10

117a9f130e...a6.exe

windows7-x64

10

117a9f130e...a6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    117a9f130eabdc825674c5e2a683632c2e87c442e4537786c4dee84c92901ca6

  • Size

    3.7MB

  • Sample

    241229-ymcg6swnhn

  • MD5

    cd9cd758a30909ee7cd0ddd3cc7d448c

  • SHA1

    3bb456472e0cc70aaa7b871d843e3d6aae219415

  • SHA256

    117a9f130eabdc825674c5e2a683632c2e87c442e4537786c4dee84c92901ca6

  • SHA512

    123aa84c096c8e0b798c19ba8537f9224b7a1931e6b0ff1ccc7f2f1a0e6030c141ff95f5432d00c5b28c9bd39622d5c0b6bd406aa133ee2498f039186fecae14

  • SSDEEP

    49152:PiDPHU7dtKUZayY912cBfIYx9lW8SMuPwNHnNCl3k+PynJIFMVP0fp7TVWgZUfQc:oP076UZLY+NYxX/yxqymqB97UfQc

Score
10/10
modiloaderdiscoveryevasionpersistencetrojan

Malware Config

Targets

    • Target

      117a9f130eabdc825674c5e2a683632c2e87c442e4537786c4dee84c92901ca6

    • Size

      3.7MB

    • MD5

      cd9cd758a30909ee7cd0ddd3cc7d448c

    • SHA1

      3bb456472e0cc70aaa7b871d843e3d6aae219415

    • SHA256

      117a9f130eabdc825674c5e2a683632c2e87c442e4537786c4dee84c92901ca6

    • SHA512

      123aa84c096c8e0b798c19ba8537f9224b7a1931e6b0ff1ccc7f2f1a0e6030c141ff95f5432d00c5b28c9bd39622d5c0b6bd406aa133ee2498f039186fecae14

    • SSDEEP

      49152:PiDPHU7dtKUZayY912cBfIYx9lW8SMuPwNHnNCl3k+PynJIFMVP0fp7TVWgZUfQc:oP076UZLY+NYxX/yxqymqB97UfQc

    Score
    10/10
    modiloaderdiscoveryevasionpersistencetrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks