General
-
Target
5477792c2ac43eea0675f934979c1b08477764cd1104fb948c17ec97708d3915
-
Size
697KB
-
Sample
221029-xh2e3abdej
-
MD5
a3b48a98196c4b86615d1297451fcfca
-
SHA1
b68be2d642086f7f51b2827d09146a66b07a00ca
-
SHA256
5477792c2ac43eea0675f934979c1b08477764cd1104fb948c17ec97708d3915
-
SHA512
816a65ea2266ee317c1b51145ba1c1ed5c2bcd6c7e335b04c2dec6b8f2b4f0eab0959afbaf0b26df608a9c1bd861a538c50352ebda9489b24fb35ed9546ba876
-
SSDEEP
12288:EERVq31AQHW3W4KlqckjwfIVLUL7f2wx/hCzJji6KT1AO33TECr:53qeG4KUchcm2PR6AA3THr
Behavioral task
behavioral1
Sample
5477792c2ac43eea0675f934979c1b08477764cd1104fb948c17ec97708d3915.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5477792c2ac43eea0675f934979c1b08477764cd1104fb948c17ec97708d3915.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
5477792c2ac43eea0675f934979c1b08477764cd1104fb948c17ec97708d3915
-
Size
697KB
-
MD5
a3b48a98196c4b86615d1297451fcfca
-
SHA1
b68be2d642086f7f51b2827d09146a66b07a00ca
-
SHA256
5477792c2ac43eea0675f934979c1b08477764cd1104fb948c17ec97708d3915
-
SHA512
816a65ea2266ee317c1b51145ba1c1ed5c2bcd6c7e335b04c2dec6b8f2b4f0eab0959afbaf0b26df608a9c1bd861a538c50352ebda9489b24fb35ed9546ba876
-
SSDEEP
12288:EERVq31AQHW3W4KlqckjwfIVLUL7f2wx/hCzJji6KT1AO33TECr:53qeG4KUchcm2PR6AA3THr
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Suspicious use of SetThreadContext
-