24:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/1f7k-b47qno-6.js","/_next/static/chunks/3spet-0yezls2.js","/_next/static/chunks/2wvg5zqmbil4p.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/3l_wb6il5gi_h.js","/_next/static/chunks/3fc9w1ah_nm2g.js"],"SampleDetailWrapper"] 27:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/1f7k-b47qno-6.js","/_next/static/chunks/3spet-0yezls2.js"],"IconMark"] 23:T4cb,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious JS/TrojanDropper.ModiLoader Sample 088a236812e1… — Score 100/100 — Hybrid Analysis","description":"Malicious verdict for sample 088a236812e1…. Malware family: JS/TrojanDropper.ModiLoader. Threat score 100/100. 2/23 AV engines flagged this file. 0 malicious and 0 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/088a236812e1eadd30268e4d59c6748e746eb8068eeb17042109ac82fd1c11db","keywords":["Malicious","JS/TrojanDropper.ModiLoader","malware analysis","sandbox report","threat intelligence","088a236812e1eadd30268e4d59c6748e746eb8068eeb17042109ac82fd1c11db"],"about":{"@type":"SoftwareApplication","name":"Bank_Copy_01336_8.25.2026.JS.js","applicationCategory":["script","javascript"],"identifier":"088a236812e1eadd30268e4d59c6748e746eb8068eeb17042109ac82fd1c11db","additionalType":"Malicious sample"},"threatScore":100,"malwareFamily":"JS/TrojanDropper.ModiLoader","antivirusDetections":{"malicious":2,"total":23},"behavioralIndicators":{"malicious":0,"suspicious":0},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}25:T1610,Pattern match: "hrhif8h.zk/vkswxrq#j5hoi3j!qvfvxif7$.kyx@zinji8|lv", Pattern match: "sw6.mu/xmnpzp!5`$yqpuusv+ofg.v/ui4lz`p.tkt#svg?/ks", Pattern match: "rhk.sze/38hgo?#g2jqe2lq2m3g", Pattern match: "x.xzeg/vk`wvxuu5/p``pe.@nz5ll|o", Pattern match: "y9z4vlvpoggy.xy/9?+@lo@vnyuo?yq5/u3@u13u8wkw9#wj9#pzsmuj+", Pattern match: "7uskyqp.tpte/u!i8.szqrmh9m3wvp3|tl/tyr", Pattern match: "qxt.po/e4rsvkv?0gmtk9yl45eqn1i!@jomeh", Pattern match: "qznfhl9zzoez.xvkq/whkj82r$6r8yn+k", Heuristic match: "gtnotgnt!l4y5mlksusi5jtmpmz?wjsw8inylh@x<`nypsts6?yv8yfs.1i/`xjqjhgs6?+>1g`y6k<<.vi?``i>7/w>6.kr..yu#ujs38l8yx<>..ggk`ihlh$s/gmqqges7/w>/gmqqgus7/w>/gmqqgws7/w>6nlq`vxj``i|ngmqqg.|i1iwrwew...?wlnu01iy4ynytl`?wlths1h$thjjvqm>mlj|yw`@i0`z??wnow8gnq", Pattern match: "noolx.rqou/imshnr@!jmuqhh+", Pattern match: "3m..q..lopj/zwjmw8gfsn/q|01ju|vltwnoh?/k/g....xiz|vl@kii...u4k5@01+0i6now8inyv4/5mi.q..nykx@1uxi!vl.g..mszr@y1jj", Pattern match: "rigy.ipp/40y.x72it|vgh7@js4", Pattern match: "yfs.1jzxi.g..novo/5$l.q..h#.phgs", Pattern match: "zwl.zwly/89", Pattern match: "k9vgwqp1n.sw/gpzt2pkmgz`6p", Pattern match: "w.wwo/i9x1#l#1stlil?lkp09kn5whw1p/u", Pattern match: "gkryjgt4qsr.ojq/0yz", Pattern match: "z.pk/+v`x1wggr!jkqjs.nwhsqtey0s.|p5uz/jno?x`6wp8$p/x9ksuoh@j1ntfv0ynmzw/xv?k.mvz$x$1y", Pattern match: "3m..q..lopj/zwjmw8goyvhftl/q11+0jwnj@.....ujpym", Pattern match: "r0esnyxqrlf.xsiu/mnklhpmmkileyjzvwy3ho?xknt83fu3i`@`lvrtz75tn", Pattern match: "hxl4f7g.rl/#lu8vo7o5v7pqoewym", Pattern match: "yhhtpozx6ur.kxy/omjs`@sz7uyi!$h", Pattern match: "rnwfp38lryttq9yirozkeyh.wmh/0@@m`to8xp4nixh", Pattern match: "1m.ps/zh?lze.k@jnpiuw8#.fq2yj/274kt", Pattern match: "qr48ul.yfo/#he175hgk/$5m2s", Pattern match: "wt1.vwh/0j3/lo", Pattern match: "0xy.ep/vg", Pattern match: "u3mkym7.ovl/gpv+i|opw", Pattern match: "mw.nerr/oirmgrmhus!lms1m+4twtpyk#fvz.h0g0#v6$", Pattern match: "0e.lijq/sxg@j9$jl11+s@7h9zots023fvwx.rph?3kxn3t@qizqot/vs$s?8y9jl9iysnh1#j@?6pnlfk.ig", Pattern match: "qs..h7slrg.w...novo/0m9oy2#@y0`...2i0hznotgjt!l4y5lt`r?zmzmnylj@x.1ivlvg?wjyw8gr", Pattern match: "w5.jk/1zhutw/tvvh!z2gt5v@zik`4gis$/qmrwpuq!q1hr7i9o8#9gshn3qhtrolr5|/p$jl@gfmrh#uvsq+er8mm06jzn5`1trsx|kmhykmx", Pattern match: "8hw.iymt/`ryirly", Heuristic match: " 'mdoxi': octynmrvnspdfail8635(4386), 'seyyj': 'evex.512.np.0f3a.w0\x2056\x20/r\x20ib', 'lgvwa': 'octynmrvnspdfailpucesh', 'pdovu': octynmrvnspdfail8635(696), 'bsncf': octynmrvnspdfail8635(5402), 'enwzh': octynmrvnspd", Heuristic match: "[15:0]/m16 {sae} , rvm-t1s , evex.lig.f3.map5.w0 5f /r , octynmrvnspdfailoo512_fp16], [vminph , w:xmm {kz}, xmm, xmm/m128/b16 , rvm-fv , evex.128.np.map5.w0 5d /r , octynmrvnspdfailoo512_fp", Pattern match: "roxfr.uz/8znusw9lpir@8u!xkn", Pattern match: "nmh.oql/kz5u6h!ku83xsx+lprpg.kwi|hoxk`tgmz91v5l0$$vqr?ho`hvr0yh/q#nuz$r`k+2$zxs108|v//22zog8xy`hgyzfuzptjnf1qxo6x49ozizrmnwir", Pattern match: "x.x.vwh/`?3/log", Pattern match: "z.om/gzhsoh?oyypti5h", Pattern match: "vkw33nmowy.hr/wyj.@#/t", Pattern match: "6psqqr0nxn.jt/h+o`jsj/#skp!p/sq$k69gqoh@i`wlt3tsezpvi?y7e0nuw.zx/3p!0", Pattern match: "q..ftv/lr.....1izlvttmnhxm?..?hmw81", Pattern match: "iu3tq0..osyg/g??4r", Pattern match: "87.gg/mgu8nupq5tpe0hkmolj2n1spu+$#xqfkef", Pattern match: "0jwjhg9z.q..lv/w6ws1g8j/6wjo4ri..?wlxzmnng8", Pattern match: "fne9skjwzlrnk.yrrt/jzugnv2r1vli5f!ki+qp5o.|`p", Pattern match: "u.u6m.yfsp/7@0jo`6+10uesv$`jw@ruuq/yvyi?qu$?rizf6yr7fxr", Pattern match: "nijiuhtq0..ix.yxj/t0un", Pattern match: "m.ly/rvivnv.pqjhuqrlseln7+", Pattern match: "vjyvo.8kjyw8gkp.pgll///+lmw8#i4", Pattern match: "w8u.gm/i2lve37./ygh/5ow....vwijmw9rrvojmw9|jt|vrt2nmw8upul/k6", Pattern match: "z3gykrrsjxj.qmfn/|iztqkioqj`3s", Pattern match: "o0.....lv/git|v$zwl1zwnow8g6hu....1fvh+9jk|9g+`yv///zwlsw9|nyvhnytz@001i2|vvtw?xhsut", Pattern match: "9w.pz/lwou.$|2k", Pattern match: "pjxl2.ix/n7t9k3|?l4g2x!npfe#jhjt1op2!x6lol5", Pattern match: "mw7ipys.fp/|qg449kwphpo1/`j+j2sp4?7xt@vrszvqyh6g@1", Pattern match: "l5r.itl/ipk$ik!ne?swv7iewmll5zxmhtktjp3@koqj`0ooy", Pattern match: "pm.xu/srelvsu@gtkvp7/xqiigq8g5wviyi9nrxu?x", Pattern match: "5l8vunw7rqygyz79.is/xo4hs5igmgn#sfzywkjfx!659gxot1v@", Pattern match: "qu.nfpx//rksqkryhh0gv?w7gmvx.p6xwo/glsmyknwyr@4j$wxe9gsp", Pattern match: "2.zg/jxnry7zvurtvv|#nvhir#?nitx7?iyjg60pi7#hvx8mrhkovw", Pattern match: "vnronzhozl.wx/jl?7sl?oyoswyy8/ztgi", Pattern match: "7.uwylwgx.lt/3$8vv0vixg1ix.lgv!lmplrn/s|jx`/0kkfj0kvizj7@p!2o|j/gizjg$.+.9xejoozieh765zjopvni@i+4qzz9w/l97ykr6!mlvt60y|ohx", Pattern match: "epgg.hmi/uoghk@n@xz+ezwpry!$h0vqo9whk?3r8u6uyhmv5@/tjw0+y$pkwzqri1+lzsyi8ujo4y", Pattern match: "v1.ker/n$|5pz", Pattern match: "z9g.iso/glutnult8trsv", Pattern match: "ryol1qjw.nj/.|su?!wi8xg2/ju?1o", Pattern match: "8z.wogq/|ozl63t`tqsgimu37pq@rk4.s", Pattern match: "hp.hk/.u4h1|j26gm6?uvtgwhjfui#qqm", Pattern match: "m.i.ovj/jvozh+9iijuzmi.!m2+ogwemvuruoqv@oto82um$3xp3ks0|pv/h2jjeemjh", Pattern match: "y.qwh/vqo8j2", Pattern match: "x.qq/uyp9q19gmz!lv.mz`7pk$", Pattern match: "k.styh.vg/o`yu6jfp?/mwr+wosig2w.u.it.i", Pattern match: "lr.....1i5vz.w..nyvi/5yg.g..h#.phe#?...mvs", Pattern match: "hli.r6m.qiih/s5nho5i@?q?v", Pattern match: "q..novn/5$$.q..mn72nys5@0x/l10", Pattern match: "o.vk/hs.h!6", Pattern match: "g.fptu/kgn?jig9n8s@yws`oyywxjw4q@og316r!n?s+ix+un6`w?xoglm#tw+j`xue?rhnte4nkmwfjrjhjiyp$h", Pattern match: "wzq.rtpy/ynw0pr!rk/lnmwyrzihu@rhn33ikgmlsn", Pattern match: "i.pv/u+t8s#mhg5t$xfw+78tutprw|jo9ykhvi`vx", Pattern match: "4rnpnl.pq/vyrllwg?vw.@8qs#hfo@!s5uxqjm/!.4m75x5i@f1ze7v7rfy`l5ph6vppp?k!!jl.|wnu8ulv`ihqqg2lg8"26:T10ba,Observed email domain:"tx$14un/|hvv!81z|!?2@v6/wlt.tkrwl?njyqnl4t>yxm9+?fkkgkq2mpsz45s6wkp3mqrymkl`ww9i!9q+ntigr!rktv8$ivnlvyplekwj4|1.qp07g9i1/wh!jrmz4g2mkipzx4#lv0v`qm>/j9lzz@tf6@q|?glxi#tpv`zg+qfmtqxooy?++mosvzwu4w@q@96skx4kqmk?kuo+mxx$8ff.3kwtul?qem`gi?qtq2rhq/sut+v?w44t0tnm2g1z1pommtng3ilnufjoo99ii!nm!!p.<0uri3h`wzx!!22lmyy6!z2h4nk?j+!jii0q3smys|+svjo.@yh0h@8lgmo$5x?splmuggm+lg/fnmz/9piwkllo36l>zpvjvu87#hrsu>rwne2x|tto6gw4wyyr>p9fkzh4xwmhog>mvj7juifvo?z>phw1orqjgsuqn6e/`up`gusrofwumj9?>7m?8mpgu`1pu2ook3mqrg96l7gm!xq@@4rmpktn6+n!j8gpmt5wky$$h#ivy5k/5.u9vjr499|@zjn3v" [Source: sample.bin], Observed email domain:"3n?urv2g6ymx!p0@mwx3yzyeje>m60q@1@?umu05z#jm#`ygzhzku8/nlorl/`s3w@peu`0z93|s!i2e4rqyk1rw`xxvq4?mvu|zn$4n>kzsvm@u6iwx/w3xnvppl#wejgsknvuru1#!ujomlih>vuee|4x.n@qlmpm/wkr9pohqnqg/@ti88zk@/8v+y?gvutz4oxvhlunv/#ji8fyv0i/olgn1jup`quiik0?inm#01@j$vu$k6!s4./@rtlqmn`wmrqh#5!kkyg.mn0|n.l44q>kh!$$e`m!o0#vy|+k#hhoyj.iu+`kt0sjnspyz2y#sxvkfpsh+r0zrk|lkglty5.je+ky2n7z@4#v2<6#ygwyt04y$lzmgghxvk9jm5i6iztz.fmw`9$6oq<2wr7jz5onvogwetw3gw4317z?h4jt6|ktu0+nnrm7kvh/r`p+gw@vqk#i7riiglp6l.pp@ewhyi$woqvgpl$l5gkroxqq+ryg`u`6gjssjyohj#gzov@5uth|>qy$hrvfko!ki1hw0l#0oxrt97yt.9!l@rtwf>`6w|igxv|9zm@|i9iw2u/ls8pzx>gntmx3@35qqgy?/n`v>6j<`!tjs+mx.`>!yw+sj+i0rp$7g?u?8wxuitjf.vn0ivs@.q`jk4mugrkpo@ttk/hpvqrglx36j/p+m!g#4s2e7yf.riv`?s`8/50/tusslgul+fpxryliru4wvn#$@#u.u6m.yfsp/7@0jo`6+10uesv$`jw@ruuq/yvyi?qu$?rizf6yr7fxrzrikk#?21fgv`?.lljkz@7o`q.68vzw!6rg0@mhli53.x0h#l#ugpr#mnimmjxsjyhj@<9sgrn>`jtilz6/ns|tz?!m3v/m!o+>8pg5`zixvt04g|ormprt|#`2j?xismorg`!4g2l6<@glxrp$x8p7j/2y#l?ezm45wzvl.q1x2u6l8lo2/hxwhu9f1r`nx|s.2f`myz0xhzmnxtu9wx|8|9>fu<#pjgj1p7y.qhpown.f>pg#l!z@qoxwko4m85mvu6fpinz`8izqpptn3jf!i.xyk5rs8@fl#tlrq?ii7lv`lp21enq5.@7zx+qhp6onk1/p97mexpgv0!huwv8kltmrrwjorgi.hng3uyl?yml>mr#ymez3|#7u8zh|plpmytl>>no09rq8jpmmlngw1k5nsjpjs+skf`4t.|mjg$t32u7>lk8g4@kj4spimmoiwzm5n8ug#ynr.ty6`/r>9zyl#tvy@tl?ir4pispw$oqu+t9nhi5ms043r@qhwmztgn!zg/sxgkow+xxx7qq1oswkgsvxwgvik36/$jm!7v8xqqru#|#jsvh6hstw1usq?2roioog!vfuoew$+t.vt2w9gqp.sm375oogvvz9yhiurzm1ox7rr.q0`zsl#lv01>h4s+?|qlg2xosnwf/ev40mmv7um3k`tt!g@gp|@h6w115zg?/n9>$|y!3hgl9$l6vz4o>u2|vmo?xj" [Source: sample.bin]1b:["$","$L2",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"$23"}}],["$","$L24",null,{"initialData":{"schema_version":"1.0.15","sha256":"088a236812e1eadd30268e4d59c6748e746eb8068eeb17042109ac82fd1c11db","overall_status":"SUCCESS","all_analysis_status":{"qsp_status":"SUCCESS","sandbox_status":"NOT_AVAILABLE","fastscan_status":"SUCCESS"},"verdict":"malicious","threat_score":100,"unified_at_epoch_ms":1791138366855,"unified_at":"2026-10-04T18:26:06.855Z","metadata":{"hashes":{"sha256":"088a236812e1eadd30268e4d59c6748e746eb8068eeb17042109ac82fd1c11db","sha1":"16808e29f15893e45319f3a953ba4c2215a172af","md5":"1d31b583d6efc436daffa553345d7dc0"},"file_info":{"file_name":"Bank_Copy_01336_8.25.2026.JS.js","file_type":["script","javascript"],"file_type_id":"js","file_size":2335382,"is_container_sample":false,"url_analysis":false},"submissions":{"first_seen":1787730950000,"last_seen":1787730950000,"last_multi_scan":1787730950000}},"detections":{"summary":{"verdict":"malicious","score":100,"tags":null},"stats":{"av":{"malicious_count":2,"suspicious_count":0,"total_engines":23},"attributions":{"malware_families_count":1,"threat_actors_count":0,"campaigns_count":0,"threat_types_count":0,"cves_count":0},"mitre_attacks":{"total":5},"sandbox_signatures":{"informative_count":6,"suspicious_count":0,"malicious_count":0,"total":6},"rule_matches":{"yara_count":0,"sigma_count":0,"suricata_count":0}},"av_detections":{"engines":{"ahnlab":{"name":"AhnLab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"antiy":{"name":"Antiy","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"aurora":{"name":"Aurora","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"avira":{"name":"Avira","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"bitdefender":{"name":"Bitdefender","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"clamav":{"name":"ClamAV","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"cmc":{"name":"CMC","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"emsisoft":{"name":"Emsisoft","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"eset":{"name":"ESET","success":true,"verdict":"malicious","threat_name":"JS/TrojanDropper.ModiLoader.BO trojan","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"filseclab":{"name":"Filseclab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"gridinsoft":{"name":"Gridinsoft","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"huorong":{"name":"Huorong","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"k7":{"name":"K7","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"lionic":{"name":"Lionic","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"netgate":{"name":"NETGATE","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"sentinelone":{"name":"SentinelOne","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"sophos":{"name":"Sophos","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"tachyon":{"name":"TACHYON","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"trellix":{"name":"Trellix","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"varist":{"name":"Varist","success":true,"verdict":"malicious","threat_name":"JS/Agent.ECX!Eldorado","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"viritexplorer":{"name":"Vir.IT eXplorer","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"xcitium":{"name":"Xcitium","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"zillya":{"name":"Zillya!","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"}}},"rule_matches":{},"attributions":{"malware_families":[{"value":"JS/TrojanDropper.ModiLoader","sources":[{"report_type":"quickscan","report_id":""}]}]},"mitre_attacks":[{"tactic":"Defense Evasion","technique":"File Deletion","attack_id":"T1070.004","attack_id_wiki":"https://attack.mitre.org/techniques/T1070/004","identifiers":[{"type":"informative","value":"Contains ability to delete files/directories (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Defense Evasion","technique":"Obfuscated Files or Information","attack_id":"T1027","attack_id_wiki":"https://attack.mitre.org/techniques/T1027","identifiers":[{"type":"informative","value":"Contains CRYPTO related strings"},{"type":"informative","value":"Contains ability to use Cryptographic classes"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Command and Control","technique":"Mail Protocols","attack_id":"T1071.003","attack_id_wiki":"https://attack.mitre.org/techniques/T1071/003","identifiers":[{"type":"informative","value":"Found mail related domain names"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Command and Control","technique":"Application Layer Protocol","attack_id":"T1071","attack_id_wiki":"https://attack.mitre.org/techniques/T1071","identifiers":[{"type":"informative","value":"Found potential URL in binary/memory"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Command and Control","technique":"Symmetric Cryptography","attack_id":"T1573.001","attack_id_wiki":"https://attack.mitre.org/techniques/T1573/001","identifiers":[{"type":"informative","value":"Contains ability to use AES encryption instructions"}],"sources":[{"report_type":"qsp","report_id":""}]}],"sandbox_signatures":[{"level":"informative","category":"Network Related","name":"Found potential URL in binary/memory","description":"$25","origin":"sample.bin","mitre_attack_id":"T1071","id":"string-3","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Network Related","name":"Found mail related domain names","description":"$26","origin":"sample.bin","mitre_attack_id":"T1071.003","id":"string-169","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Contains CRYPTO related strings","description":"file/memory contains long string with (Indicator: \"aes\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1027","id":"string-57","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Cryptographic Related","name":"Contains ability to use AES encryption instructions","description":"file/memory contains long string with (Indicator: \"AESNI\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1573.001","id":"string-584","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Anti-Detection/Stealthiness","name":"Contains ability to use Cryptographic classes","description":"file/memory contains long string with (Indicator: \"Oid\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1027","id":"string-138","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"System Security","name":"Contains ability to delete files/directories (API string)","description":"file/memory contains long string with (Indicator: \"DeleteFile\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1070.004","id":"string-308","sources":[{"report_type":"qsp","report_id":""}]}],"intel_graph":{"map":{},"chains":[]}},"activity":{"stats":{"process_count":0,"spawned_processes_count":0,"injected_processes_count":0,"script_calls_count":0,"mutex_created_count":0,"imported_dlls_count":0,"dropped_files_count":0,"extracted_files_count":0,"files_written_count":0,"files_deleted_count":0,"registry_keys_created_count":0,"registry_keys_modified_count":0,"registry_keys_deleted_count":0,"registry_keys_opened_count":0,"registry_keys_queried_count":0,"registry_operations_count":0,"embedded_ips_count":0,"embedded_domains_count":0,"embedded_urls_count":0,"contacted_hosts_count":0,"dns_resolutions_count":0,"contacted_urls_count":0,"http_requests_count":0},"behavior_tags":null,"network_activity":{"contacted_hosts":null,"dns_resolutions":null,"http_requests":null},"process_activity":{"sources":null,"processes":null,"all_imported_dlls":null},"file_activity":{"dropped_files":null,"extracted_files":null,"files_written":null,"files_deleted":null},"registry_activity":{"keys_created":null,"keys_modified":null,"keys_deleted":null},"mutex_activity":{"mutex_created":null}},"report_ids":{}}}]]}] 1e:null 22:[["$","title","0",{"children":"Malicious JS/TrojanDropper.ModiLoader Sample 088a236812e1… — Score 100/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Malicious verdict for sample 088a236812e1…. Malware family: JS/TrojanDropper.ModiLoader. Threat score 100/100. 2/23 AV engines flagged this file. 0 malicious and 0 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/088a236812e1eadd30268e4d59c6748e746eb8068eeb17042109ac82fd1c11db"}],["$","meta","4",{"property":"og:title","content":"Malicious JS/TrojanDropper.ModiLoader Sample 088a236812e1… — Score 100/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Malicious verdict for sample 088a236812e1…. Malware family: JS/TrojanDropper.ModiLoader. Threat score 100/100. 2/23 AV engines flagged this file. 0 malicious and 0 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/088a236812e1eadd30268e4d59c6748e746eb8068eeb17042109ac82fd1c11db"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Malicious JS/TrojanDropper.ModiLoader Sample 088a236812e1… — Score 100/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Malicious verdict for sample 088a236812e1…. Malware family: JS/TrojanDropper.ModiLoader. Threat score 100/100. 2/23 AV engines flagged this file. 0 malicious and 0 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L27","11",{}]]