General

  • Target

    f3a0d6b5b981eff050a0516013192e85143d135a071045d982dfadacef23021c

  • Size

    740KB

  • Sample

    221014-lfzb5shccq

  • MD5

    7782d68aa335a689ee4bde38b31d3930

  • SHA1

    8c4a88c489cb76fd612b5d14ce5c0843eca41ea1

  • SHA256

    f3a0d6b5b981eff050a0516013192e85143d135a071045d982dfadacef23021c

  • SHA512

    64cb9be688364b3175268cf2902c41309c9d25aff10f8b5bf8d4d6905d386bd3e89c44768c13b26358fbed2661b314820430877aaeb3d98656cf60f9ee8b6900

  • SSDEEP

    12288:wc//////385AFyN5pmHY5K63mWRpqcY/TIwFWvcZBTjhczqBdHGIUK1Cdt:wc//////385AFyNGHY5H3zRpqcY/TDWB

Score
10/10

Malware Config

Targets

    • Target

      f3a0d6b5b981eff050a0516013192e85143d135a071045d982dfadacef23021c

    • Size

      740KB

    • MD5

      7782d68aa335a689ee4bde38b31d3930

    • SHA1

      8c4a88c489cb76fd612b5d14ce5c0843eca41ea1

    • SHA256

      f3a0d6b5b981eff050a0516013192e85143d135a071045d982dfadacef23021c

    • SHA512

      64cb9be688364b3175268cf2902c41309c9d25aff10f8b5bf8d4d6905d386bd3e89c44768c13b26358fbed2661b314820430877aaeb3d98656cf60f9ee8b6900

    • SSDEEP

      12288:wc//////385AFyN5pmHY5K63mWRpqcY/TIwFWvcZBTjhczqBdHGIUK1Cdt:wc//////385AFyNGHY5H3zRpqcY/TDWB

    Score
    10/10
    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks