Overview

overview

10

Static

static

1

URLScan

urlscan

1

https://cassiaatamme...

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    https://cassiaatammetalsllc-my.sharepoint.com/:u:/g/personal/adelina_cassia_ae/ETGMyGSYf1xKoWkGEBChfdoB4u5gHI6YiIHyPRgZ8LAdpA?e=I0GKza&download=1

  • Sample

    241230-eyfjesxqgw

Score
10/10
modiloadercollectiondiscoverypersistencetrojan

Malware Config

Targets

    • Target

      https://cassiaatammetalsllc-my.sharepoint.com/:u:/g/personal/adelina_cassia_ae/ETGMyGSYf1xKoWkGEBChfdoB4u5gHI6YiIHyPRgZ8LAdpA?e=I0GKza&download=1

    Score
    10/10
    modiloadercollectiondiscoverypersistencetrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Accesses Microsoft Outlook accounts

      collection

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks