General
-
Target
0bbdfe4e5c4381742eb8029411d07852e7d993db277e4c7528d29da112a4fc41
-
Size
332KB
-
Sample
221003-1f7qvagee9
-
MD5
3dd73ac9d12b90576829463ba7b18601
-
SHA1
c701b9ba3f6e923cec8bf48c9eab3c6ef0e4ea22
-
SHA256
0bbdfe4e5c4381742eb8029411d07852e7d993db277e4c7528d29da112a4fc41
-
SHA512
44fbb167ea845ee01b76e40d2508540b11712bbba08372f40f03a04b1c2a608518e48fd7dcb8062f1d0f164b70c7169dd6c7a19536f7f9032f6c8d0d01780d57
-
SSDEEP
1536:c1DMz1DQvXLq6t7awFONecenlLnQHIG5R9c73P600tFnc9cenC3P600aLnQHIG5+:9eGw9A0rC00tm8C00MAKrc00bE
Static task
static1
Behavioral task
behavioral1
Sample
0bbdfe4e5c4381742eb8029411d07852e7d993db277e4c7528d29da112a4fc41.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0bbdfe4e5c4381742eb8029411d07852e7d993db277e4c7528d29da112a4fc41.exe
Resource
win10v2004-20220901-en
Malware Config
Targets
-
-
Target
0bbdfe4e5c4381742eb8029411d07852e7d993db277e4c7528d29da112a4fc41
-
Size
332KB
-
MD5
3dd73ac9d12b90576829463ba7b18601
-
SHA1
c701b9ba3f6e923cec8bf48c9eab3c6ef0e4ea22
-
SHA256
0bbdfe4e5c4381742eb8029411d07852e7d993db277e4c7528d29da112a4fc41
-
SHA512
44fbb167ea845ee01b76e40d2508540b11712bbba08372f40f03a04b1c2a608518e48fd7dcb8062f1d0f164b70c7169dd6c7a19536f7f9032f6c8d0d01780d57
-
SSDEEP
1536:c1DMz1DQvXLq6t7awFONecenlLnQHIG5R9c73P600tFnc9cenC3P600aLnQHIG5+:9eGw9A0rC00tm8C00MAKrc00bE
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-