General
-
Target
0199e82d3f02a40d5a25c9a3dca0fb859fa639e48b34f5b3851f2746cc6b34c6
-
Size
206KB
-
Sample
221003-zmczdafacm
-
MD5
3ca892d1e448dd1ceff5490311ec8b5a
-
SHA1
a4ae6269fec4afadbff5394abbdd70d37e647870
-
SHA256
0199e82d3f02a40d5a25c9a3dca0fb859fa639e48b34f5b3851f2746cc6b34c6
-
SHA512
f348e2ada958952c6d36e4e6e4179298613fe1c759e8d718cbfde20d2d539650a018424813a42c3d99158fa31dca58fa0abf133d8b27a7e2f87d38a62596984a
-
SSDEEP
3072:7C7fC3n5WSBNdT4hVDtsRDUoV4x2lbVv/spDflf6AWRMkx21lu34vu0ogM75a:76fundB3T4hVRsRUy62Z98DBVWelPsQ
Static task
static1
Behavioral task
behavioral1
Sample
0199e82d3f02a40d5a25c9a3dca0fb859fa639e48b34f5b3851f2746cc6b34c6.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0199e82d3f02a40d5a25c9a3dca0fb859fa639e48b34f5b3851f2746cc6b34c6.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
0199e82d3f02a40d5a25c9a3dca0fb859fa639e48b34f5b3851f2746cc6b34c6
-
Size
206KB
-
MD5
3ca892d1e448dd1ceff5490311ec8b5a
-
SHA1
a4ae6269fec4afadbff5394abbdd70d37e647870
-
SHA256
0199e82d3f02a40d5a25c9a3dca0fb859fa639e48b34f5b3851f2746cc6b34c6
-
SHA512
f348e2ada958952c6d36e4e6e4179298613fe1c759e8d718cbfde20d2d539650a018424813a42c3d99158fa31dca58fa0abf133d8b27a7e2f87d38a62596984a
-
SSDEEP
3072:7C7fC3n5WSBNdT4hVDtsRDUoV4x2lbVv/spDflf6AWRMkx21lu34vu0ogM75a:76fundB3T4hVRsRUy62Z98DBVWelPsQ
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Modifies Installed Components in the registry
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-