General
-
Target
Document.exe
-
Size
1.0MB
-
Sample
210408-wm83221ph6
-
MD5
2b087560bc75a3f809da01876c3410dd
-
SHA1
7a81008442ccad66e42cf1a7f1ed4d7a5cc29ee7
-
SHA256
84f9e8abd4682870a94655c297e283b12de8162454217deb5d56d33603a04b35
-
SHA512
bbc4cb550a67b1fe15b7d744ea7636c0e89addc1bcacac7915a331f02655ce7a84ae7e881ea4a683a0e4f203946cbb6a98688e5a5238aa4e7effcb896fdaf997
Static task
static1
Behavioral task
behavioral1
Sample
Document.exe
Resource
win7v20201028
Behavioral task
behavioral2
Sample
Document.exe
Resource
win10v20201028
Malware Config
Extracted
remcos
Bruno.camdvr.org:2404
Bruno1.camdvr.org:2404
Bruno2.camdvr.org:2404
Targets
-
-
Target
Document.exe
-
Size
1.0MB
-
MD5
2b087560bc75a3f809da01876c3410dd
-
SHA1
7a81008442ccad66e42cf1a7f1ed4d7a5cc29ee7
-
SHA256
84f9e8abd4682870a94655c297e283b12de8162454217deb5d56d33603a04b35
-
SHA512
bbc4cb550a67b1fe15b7d744ea7636c0e89addc1bcacac7915a331f02655ce7a84ae7e881ea4a683a0e4f203946cbb6a98688e5a5238aa4e7effcb896fdaf997
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
Adds Run key to start application
-