General

  • Target

    70dc7e824875c362c0b4a607088913ad2aabae0845b0189c548731b25f6959e1

  • Size

    77KB

  • Sample

    221123-3l1wlafh9v

  • MD5

    269ed420b366fd02fcad4ce371128df1

  • SHA1

    935e1fb8b276049dcfb426eb983fab83010240ff

  • SHA256

    70dc7e824875c362c0b4a607088913ad2aabae0845b0189c548731b25f6959e1

  • SHA512

    48eebbe4a0baa88999d70497f2e9d8a35fe40a830c6cc446dd778c48e90444d355d6653aa355df9a652d38fc3c327e0649091508b4db31679aa132ff53a3e1ff

  • SSDEEP

    768:NpfzGKMk8dmGsdmdjCHrVj11QcqmcUgvJfNfIf8Rap6rqJnK:DemGsqjCLVjwLHUwJ1fcb8rEnK

Score
10/10

Malware Config

Targets

    • Target

      70dc7e824875c362c0b4a607088913ad2aabae0845b0189c548731b25f6959e1

    • Size

      77KB

    • MD5

      269ed420b366fd02fcad4ce371128df1

    • SHA1

      935e1fb8b276049dcfb426eb983fab83010240ff

    • SHA256

      70dc7e824875c362c0b4a607088913ad2aabae0845b0189c548731b25f6959e1

    • SHA512

      48eebbe4a0baa88999d70497f2e9d8a35fe40a830c6cc446dd778c48e90444d355d6653aa355df9a652d38fc3c327e0649091508b4db31679aa132ff53a3e1ff

    • SSDEEP

      768:NpfzGKMk8dmGsdmdjCHrVj11QcqmcUgvJfNfIf8Rap6rqJnK:DemGsqjCLVjwLHUwJ1fcb8rEnK

    Score
    10/10
    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

MITRE ATT&CK Matrix ATT&CK v6

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Tasks