General
-
Target
Requisition ,,xp.exe
-
Size
626KB
-
Sample
220804-sdjbgagbc9
-
MD5
1dd6591858428a58b81dfbd26507cf87
-
SHA1
157fdf999bfa380e886d442f25eddea3e26eca04
-
SHA256
c2b2e774a10f9b1de9375018b051a0a898bf90065d49a0d716de4bcfefd9abe5
-
SHA512
30ad1d64cc494b3ac29f987e9c1c5a2b1ac6aba2215b92df3fa10a8c933a56a4289518a5380c04b15d88242c1d73016a7b5c52c68e5cfe9e767647725db2865a
Static task
static1
Behavioral task
behavioral1
Sample
Requisition ,,xp.exe
Resource
win7-20220718-en
Behavioral task
behavioral2
Sample
Requisition ,,xp.exe
Resource
win10v2004-20220721-en
Malware Config
Targets
-
-
Target
Requisition ,,xp.exe
-
Size
626KB
-
MD5
1dd6591858428a58b81dfbd26507cf87
-
SHA1
157fdf999bfa380e886d442f25eddea3e26eca04
-
SHA256
c2b2e774a10f9b1de9375018b051a0a898bf90065d49a0d716de4bcfefd9abe5
-
SHA512
30ad1d64cc494b3ac29f987e9c1c5a2b1ac6aba2215b92df3fa10a8c933a56a4289518a5380c04b15d88242c1d73016a7b5c52c68e5cfe9e767647725db2865a
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
Adds Run key to start application
-