modiloader | 2b9056e50ab3695c670e588121789aa7986176234756e64d6f47f08bd41378e1

General

Target

2b9056e50ab3695c670e588121789aa7986176234756e64d6f47f08bd41378e1
Size

51KB
Sample

250106-1ef7ha1jan
MD5

8bf89ad61b49848a71b1151667332ca7
SHA1

70dc257c46a612564fbb1019ad6e5b5269be9886
SHA256

2b9056e50ab3695c670e588121789aa7986176234756e64d6f47f08bd41378e1
SHA512

57f69b7fdfefacee9912c20f0168a5ef320c18d7383637f0c0687bb5c0eede03ff93cd14f308e353159b65e7ccb9914e67b1ff8b0caf7e45632140fb9445be39
SSDEEP

384:Zp0xfMJvBv2xv8R89JMjN6m4iKpIEOqY+tKiSsqdg1vA9tzt/Mi+P0jN4pfZt8Fs:ZkUJJU6wVoJ+1o9t1MRi4pQmv+SWw

Score

10^/10

Malware Config

Targets

- Target
  
  2b9056e50ab3695c670e588121789aa7986176234756e64d6f47f08bd41378e1
- Size
  
  51KB
- MD5
  
  8bf89ad61b49848a71b1151667332ca7
- SHA1
  
  70dc257c46a612564fbb1019ad6e5b5269be9886
- SHA256
  
  2b9056e50ab3695c670e588121789aa7986176234756e64d6f47f08bd41378e1
- SHA512
  
  57f69b7fdfefacee9912c20f0168a5ef320c18d7383637f0c0687bb5c0eede03ff93cd14f308e353159b65e7ccb9914e67b1ff8b0caf7e45632140fb9445be39
- SSDEEP
  
  384:Zp0xfMJvBv2xv8R89JMjN6m4iKpIEOqY+tKiSsqdg1vA9tzt/Mi+P0jN4pfZt8Fs:ZkUJJU6wVoJ+1o9t1MRi4pQmv+SWw
Score

10^/10

modiloader discovery trojan
- ModiLoader, DBatLoader
  ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
  trojan modiloader
- Modiloader family
  modiloader
- ModiLoader Second Stage
- Downloads MZ/PE file
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2

T1012

System Information Discovery

2

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

ModiLoader, DBatLoader

Modiloader family

ModiLoader Second Stage

Downloads MZ/PE file

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2