Overview

overview

10

Static

static

3

b307218533...92.exe

windows7-x64

10

b307218533...92.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b307218533a96ecefbdab4fad0dec64baec07ef261e7985b899a4c43b1325892.exe

  • Size

    973KB

  • Sample

    250121-d68phavjek

  • MD5

    c67c61c88599a7c48fce6f41d2f824af

  • SHA1

    774d18c58980225ed4321ad479b0e7a45ab84efa

  • SHA256

    b307218533a96ecefbdab4fad0dec64baec07ef261e7985b899a4c43b1325892

  • SHA512

    3f155a898a5222339acc7ea69abe6d21f87647473f98a0ee88f12a6a41ee9fd615f3163a46d6518c31d5c8360586acf4c08798a2faa0e924bb7062a587fe14c8

  • SSDEEP

    24576:bBVRVxmQEkZkjSnbyewh+lMewKe9X7yxw7IYNoIjSst8H2se:bBmB+Q+SJwxw7IYNbjSi8H2se

Score
10/10
modiloaderdiscoverypersistencetrojan

Malware Config

Targets

    • Target

      b307218533a96ecefbdab4fad0dec64baec07ef261e7985b899a4c43b1325892.exe

    • Size

      973KB

    • MD5

      c67c61c88599a7c48fce6f41d2f824af

    • SHA1

      774d18c58980225ed4321ad479b0e7a45ab84efa

    • SHA256

      b307218533a96ecefbdab4fad0dec64baec07ef261e7985b899a4c43b1325892

    • SHA512

      3f155a898a5222339acc7ea69abe6d21f87647473f98a0ee88f12a6a41ee9fd615f3163a46d6518c31d5c8360586acf4c08798a2faa0e924bb7062a587fe14c8

    • SSDEEP

      24576:bBVRVxmQEkZkjSnbyewh+lMewKe9X7yxw7IYNoIjSst8H2se:bBmB+Q+SJwxw7IYNbjSi8H2se

    Score
    10/10
    modiloaderdiscoverypersistencetrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks