General
-
Target
21ff3661fd96f689aa32338ca899eef0afdc23f509bf29cbb85ad6da5f7bcee6
-
Size
1.0MB
-
Sample
220420-ewlyesahe7
-
MD5
6adcba88a16f508ec905410cbb050894
-
SHA1
d56cf76e5dac45f67a4e20e6a5b5b909d0f81b7d
-
SHA256
21ff3661fd96f689aa32338ca899eef0afdc23f509bf29cbb85ad6da5f7bcee6
-
SHA512
b0d6058716d4bf1f9b82a80cf53f3663848a1a984b2509807606b932d47f584eb7e20064328e287eff1a906e3cd9e8fe1b9b95089a8ad7d38217e07370a7e4df
Static task
static1
Behavioral task
behavioral1
Sample
21ff3661fd96f689aa32338ca899eef0afdc23f509bf29cbb85ad6da5f7bcee6.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
21ff3661fd96f689aa32338ca899eef0afdc23f509bf29cbb85ad6da5f7bcee6.exe
Resource
win10v2004-20220414-en
Malware Config
Extracted
modiloader
https://cdn.discordapp.com/attachments/762895490362638339/771585630530306059/Swdlert
Targets
-
-
Target
21ff3661fd96f689aa32338ca899eef0afdc23f509bf29cbb85ad6da5f7bcee6
-
Size
1.0MB
-
MD5
6adcba88a16f508ec905410cbb050894
-
SHA1
d56cf76e5dac45f67a4e20e6a5b5b909d0f81b7d
-
SHA256
21ff3661fd96f689aa32338ca899eef0afdc23f509bf29cbb85ad6da5f7bcee6
-
SHA512
b0d6058716d4bf1f9b82a80cf53f3663848a1a984b2509807606b932d47f584eb7e20064328e287eff1a906e3cd9e8fe1b9b95089a8ad7d38217e07370a7e4df
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader First Stage
-
Legitimate hosting services abused for malware hosting/C2
-