General

  • Target

    ff721c81f01a511abc8d3568de03079511597575d5ef50c0033ca335dd6a7317

  • Size

    21KB

  • MD5

    6ef8e6ce6466cc5d0bdf47d933884e02

  • SHA1

    961d7b7a05adb0d456c7e6d6daf29b269b539e48

  • SHA256

    ff721c81f01a511abc8d3568de03079511597575d5ef50c0033ca335dd6a7317

  • SHA512

    db8aaa069b331756f2876b3afa0b44de4092cd8bd763602d5995b1ce9982c1b9703cd485a09d1dd6aa82a2d34a92c9ed28d147a5f073ddf31f693776a97992b3

  • SSDEEP

    384:Y1uVMOXixV+f8TWt21QqZ3X1hns7NvrsTfaEr097C1wVb0cPCgYF:7Xix+8TWt219YhIYACV3q3

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • ff721c81f01a511abc8d3568de03079511597575d5ef50c0033ca335dd6a7317
    .dll regsvr32 windows x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows x86


    Headers

    Sections