General
- Target DHL shipment_PDF.scr
- Size 685KB
- Sample201012-bax6nfp7w6
- SHA256 37866906c56f815018fd573608c4cdd0d96ca64eefebb8b5fd8fd94e9c4db787
- MD5 72cd7f1060da59e5f82e1a8381880d3d
- SHA1 a51f325a49297210c379544b90f07b5cf681ca3a
- SHA512 7674b690f0438e5d9a972216f2e010833732080c7f170a227e0bb05ab65a6573cdd8568a6509581d4b0662872c3e1f0f85c9aa64bb21ff8e6eecf25afe64d120
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DHL shipment_PDF.scr
Resource
win7v200722
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
DHL shipment_PDF.scr
Resource
win10v200722
0 signatures
0 seconds
Malware Config
Targets
-
- Target DHL shipment_PDF.scr
- Size 685KB
- SHA256 37866906c56f815018fd573608c4cdd0d96ca64eefebb8b5fd8fd94e9c4db787
- MD5 72cd7f1060da59e5f82e1a8381880d3d
- SHA1 a51f325a49297210c379544b90f07b5cf681ca3a
- SHA512 7674b690f0438e5d9a972216f2e010833732080c7f170a227e0bb05ab65a6573cdd8568a6509581d4b0662872c3e1f0f85c9aa64bb21ff8e6eecf25afe64d120
- MD5 SHA1 SHA512
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader First Stage