General
- Target Fedex85520.exe
- Size 982KB
- Sample201109-2mzfktyb4s
- SHA256 a7b2c2dfcb01c3c3b3dc945f3b8d1c907a4de8aba291241466a9da4c69492a29
- MD5 e18a27c28946a96a8503049ea1cb36c4
- SHA1 0eec37c935d347037108baeeb90033f843477d31
- SHA512 7fec5096a95a60714677dfe65876ced387b0982b3061563157e3e2f9d5fdd245a2f22eda5d115945939a2ccf58bbeda474d6e0e7cb3702f0ba910348f664e939
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
Fedex85520.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
Fedex85520.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Targets
-
- Target Fedex85520.exe
- Size 982KB
- SHA256 a7b2c2dfcb01c3c3b3dc945f3b8d1c907a4de8aba291241466a9da4c69492a29
- MD5 e18a27c28946a96a8503049ea1cb36c4
- SHA1 0eec37c935d347037108baeeb90033f843477d31
- SHA512 7fec5096a95a60714677dfe65876ced387b0982b3061563157e3e2f9d5fdd245a2f22eda5d115945939a2ccf58bbeda474d6e0e7cb3702f0ba910348f664e939
- MD5 SHA1 SHA512
Score10/10ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
ModiLoader First Stage
Executes dropped EXE
Loads dropped DLL