modiloader | 9a9420b07e8c7424af13f736872d44d542a75116384172c72a127f7431735bbd

Sharing

Target

9a9420b07e8c7424af13f736872d44d542a75116384172c72a127f7431735bbd
Size

19.7MB
MD5

3a09d08e433c981981a6d0699b0acd2e
SHA1

c44c473533da8b8dbae314117de30daf4dabfd73
SHA256

9a9420b07e8c7424af13f736872d44d542a75116384172c72a127f7431735bbd
SHA512

54a56b653009bf682906dbd0be407ab3dc16d5f414474849c6e9afcaa34d457b9ebb3d855c895504a739a82f980da043d95b91947228c7c34219f8f613cccd66
SSDEEP

196608:oBVcSNYEv4IGO3ogwCPfAtUD0WhxBCdMNSJ1tfSjYHSwtWV+rM7e5rF2+e5ylneb:qiC

Score

10^/10

Cobalt Strike reflective loader 1 IoCs

Detects the reflective loader used by Cobalt Strike.

resource	yara_rule
sample	cobalt_reflective_dll

Detected Mount Locker ransomware 1 IoCs

resource	yara_rule
sample	RANSOM_mountlocker

Detects Zeppelin payload 1 IoCs

resource	yara_rule
sample	family_zeppelin

HelloKitty ELF 1 IoCs

resource	yara_rule
sample	family_hellokitty_elf

Industroyer IEC-104 Module 1 IoCs

Contains strings related to Industroyer module used to communicate with power transmission grids over IEC-104 protocol.

resource	yara_rule
sample	win_industroyer_w3

MassLogger log file 1 IoCs

Detects a log file produced by MassLogger.

resource	yara_rule
sample	masslogger_log_file

Merlin payload 1 IoCs

resource	yara_rule
sample	family_merlin

ModiLoader Second Stage 1 IoCs

resource	yara_rule
sample	modiloader_stage2

NetFilter payload 1 IoCs

resource	yara_rule
sample	netfilter_payload

NetWire RAT payload 1 IoCs

rat

resource	yara_rule
sample	netwire

Snake Keylogger payload 1 IoCs

resource	yara_rule
sample	family_snakekeylogger

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	family_xmrig