Overview

overview

10

Static

static

3

MACHINE QUOTATION.exe

windows7-x64

3

MACHINE QUOTATION.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c213f5d83e0e4fb8cd79d8a8b9793e2bff559eaed4c19f907f0e91723762b8c3

  • Size

    763KB

  • Sample

    250220-q8fsqaxrx2

  • MD5

    79d90b17c6a3585be2dc4d2c7cc73eed

  • SHA1

    a00a45e4e092504d88f0525417da0cdca17cebf2

  • SHA256

    c213f5d83e0e4fb8cd79d8a8b9793e2bff559eaed4c19f907f0e91723762b8c3

  • SHA512

    939727c74bdbcac52c8a2fc4d6bc928bea2d06e1851881959d530f04a86bb466b6b1ae7f41abe128fe44ca0dc42cf781f7d6183d365078f78deafc81225fd0fa

  • SSDEEP

    12288:IH6BHqhbd9hjT5XciKk3WGjXOf5+hK2C3w4PY0pv6lTNYe8q2T4+xiW3ajJ:KrJhHqiKk3WGjOf5+wfw1pqijjJ

Score
10/10
modiloaderwarzoneratdiscoveryinfostealerrattrojan

Malware Config

Targets

    • Target

      MACHINE QUOTATION.exe

    • Size

      1.6MB

    • MD5

      55121a01357e08afbb13cd866842160f

    • SHA1

      9baadb101bc10773b9b3b193f8f002e3b5711115

    • SHA256

      5dcbf984225d5a2f42d6382630a97b57a097954925465c1369e106efb83cda0c

    • SHA512

      ec844e64c3f756c2e4195a3d419654818dadc4b5fb678a2af6df7b6efdac4c4c0a1f56c7c3be61eea8dcc5f98e8da97e47f1e918a8e3b5fb1adc72700f5c791c

    • SSDEEP

      24576:i8tlnAd8xNapQHnIuetlVP8w9Si/6nvVlp0cYYa4Tdk4EzS65+19T:iqqqJvI88Si/SvVFnTS4Q5+1V

    Score
    10/10
    discoverymodiloaderwarzoneratinfostealerrattrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • WarzoneRat, AveMaria

      WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

      ratinfostealerwarzonerat

    • Warzonerat family

      warzonerat

    • ModiLoader Second Stage

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks