General
-
Target
44d3badf6bc626e46b423d64dee63b8e3e2831df762591d97b56e21b528c91be
-
Size
495KB
-
Sample
221004-gxledsfbc4
-
MD5
4dc541543ad84d7d790ab00d47b0ceda
-
SHA1
1b7f0a0f4592a82a5438e710218baa24f20ca13e
-
SHA256
44d3badf6bc626e46b423d64dee63b8e3e2831df762591d97b56e21b528c91be
-
SHA512
bc7e6d743f50f1eba1a115e77785378bb95f04013620adc58fb8791768615b3805ee732201263cd6d52605016fc34c2b7157f2bddd4f1bb0f2cec361a2e6d572
-
SSDEEP
12288:KYnBSkuVUeZdYqwT3IsfJK3uDnA06N2uD:/SkuiqwT3oI8j
Behavioral task
behavioral1
Sample
44d3badf6bc626e46b423d64dee63b8e3e2831df762591d97b56e21b528c91be.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
44d3badf6bc626e46b423d64dee63b8e3e2831df762591d97b56e21b528c91be.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
44d3badf6bc626e46b423d64dee63b8e3e2831df762591d97b56e21b528c91be
-
Size
495KB
-
MD5
4dc541543ad84d7d790ab00d47b0ceda
-
SHA1
1b7f0a0f4592a82a5438e710218baa24f20ca13e
-
SHA256
44d3badf6bc626e46b423d64dee63b8e3e2831df762591d97b56e21b528c91be
-
SHA512
bc7e6d743f50f1eba1a115e77785378bb95f04013620adc58fb8791768615b3805ee732201263cd6d52605016fc34c2b7157f2bddd4f1bb0f2cec361a2e6d572
-
SSDEEP
12288:KYnBSkuVUeZdYqwT3IsfJK3uDnA06N2uD:/SkuiqwT3oI8j
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Adds Run key to start application
-