General
- Target Requisition ,,xp.exe
- Size 626KB
- Sample220804-sf581sgbf3
- SHA256 c2b2e774a10f9b1de9375018b051a0a898bf90065d49a0d716de4bcfefd9abe5
- MD5 1dd6591858428a58b81dfbd26507cf87
- SHA1 157fdf999bfa380e886d442f25eddea3e26eca04
- SHA512 30ad1d64cc494b3ac29f987e9c1c5a2b1ac6aba2215b92df3fa10a8c933a56a4289518a5380c04b15d88242c1d73016a7b5c52c68e5cfe9e767647725db2865a
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
Requisition ,,xp.exe
Resource
win7-20220718-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Requisition ,,xp.exe
Resource
win10v2004-20220721-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target Requisition ,,xp.exe
- Size 626KB
- SHA256 c2b2e774a10f9b1de9375018b051a0a898bf90065d49a0d716de4bcfefd9abe5
- MD5 1dd6591858428a58b81dfbd26507cf87
- SHA1 157fdf999bfa380e886d442f25eddea3e26eca04
- SHA512 30ad1d64cc494b3ac29f987e9c1c5a2b1ac6aba2215b92df3fa10a8c933a56a4289518a5380c04b15d88242c1d73016a7b5c52c68e5cfe9e767647725db2865a
- MD5 SHA1 SHA512
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
Adds Run key to start application