General
-
Target
99e0cec73721a7939f991571ed4c3a7a659410db6039d7fc3abc67e580542fbf
-
Size
152KB
-
Sample
221125-x8r93sac63
-
MD5
30b0b5ba17e8f6e69c7ae4a1e051ac30
-
SHA1
85d578c1ae2ac8b4cfd35ad6f0060f664759ce97
-
SHA256
99e0cec73721a7939f991571ed4c3a7a659410db6039d7fc3abc67e580542fbf
-
SHA512
786652251fbdb56a052708cace064852f142414c81bb84b9bbfb85a0b71a0f35257987395223d83960b359bf72a569ead4d4a8727d92f41d1623fb5e857ae131
-
SSDEEP
1536:c1DMz1DQvXLq6t7awFONecenlLnQHIG5R9c73P600t:9eGw9A0rC00t
Static task
static1
Behavioral task
behavioral1
Sample
99e0cec73721a7939f991571ed4c3a7a659410db6039d7fc3abc67e580542fbf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
99e0cec73721a7939f991571ed4c3a7a659410db6039d7fc3abc67e580542fbf.exe
Resource
win10v2004-20220901-en
Malware Config
Targets
-
-
Target
99e0cec73721a7939f991571ed4c3a7a659410db6039d7fc3abc67e580542fbf
-
Size
152KB
-
MD5
30b0b5ba17e8f6e69c7ae4a1e051ac30
-
SHA1
85d578c1ae2ac8b4cfd35ad6f0060f664759ce97
-
SHA256
99e0cec73721a7939f991571ed4c3a7a659410db6039d7fc3abc67e580542fbf
-
SHA512
786652251fbdb56a052708cace064852f142414c81bb84b9bbfb85a0b71a0f35257987395223d83960b359bf72a569ead4d4a8727d92f41d1623fb5e857ae131
-
SSDEEP
1536:c1DMz1DQvXLq6t7awFONecenlLnQHIG5R9c73P600t:9eGw9A0rC00t
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-