General
-
Target
07eff1726003e00b7557efed2fdf38c057234ce42761d06c7a066e2183dc7fb6
-
Size
68KB
-
Sample
221124-d8hwvsaa6z
-
MD5
03039af402b17dea32b9ff0477f167fe
-
SHA1
09f75a3189e64bc91c5df9780c0486b80776b616
-
SHA256
07eff1726003e00b7557efed2fdf38c057234ce42761d06c7a066e2183dc7fb6
-
SHA512
dd3f8c19c555e8cbcfe88233d809ec5176ba2fb1daa8c1fd9fec0aab56a7e7067015e7688f421575748f9aa3f7f3329345fb29a45cf70fc2f83933f71fcc2908
-
SSDEEP
1536:VYNiejDbYn+vrCpvRcrJNUSz33MagCXQbgH1cntQJYBBnouy8+:OxbYn+vrWW3UE33dXQbgHynuJ2hout+
Static task
static1
Behavioral task
behavioral1
Sample
07eff1726003e00b7557efed2fdf38c057234ce42761d06c7a066e2183dc7fb6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
07eff1726003e00b7557efed2fdf38c057234ce42761d06c7a066e2183dc7fb6.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
07eff1726003e00b7557efed2fdf38c057234ce42761d06c7a066e2183dc7fb6
-
Size
68KB
-
MD5
03039af402b17dea32b9ff0477f167fe
-
SHA1
09f75a3189e64bc91c5df9780c0486b80776b616
-
SHA256
07eff1726003e00b7557efed2fdf38c057234ce42761d06c7a066e2183dc7fb6
-
SHA512
dd3f8c19c555e8cbcfe88233d809ec5176ba2fb1daa8c1fd9fec0aab56a7e7067015e7688f421575748f9aa3f7f3329345fb29a45cf70fc2f83933f71fcc2908
-
SSDEEP
1536:VYNiejDbYn+vrCpvRcrJNUSz33MagCXQbgH1cntQJYBBnouy8+:OxbYn+vrWW3UE33dXQbgHynuJ2hout+
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
Modifies WinLogon for persistence
-
ModiLoader Second Stage
-
Executes dropped EXE
-
Adds Run key to start application
-