General
-
Target
085c75648c690ddf61f9d9dd62930fdd4c1e0b5f0477ff017d2a0279db79c9b0
-
Size
163KB
-
Sample
221126-aesbnagf45
-
MD5
0fb955f43776ed2ab622ffd0f415c96f
-
SHA1
38b74fcd9d4361c3c694af9e5ff6f224e1afe309
-
SHA256
085c75648c690ddf61f9d9dd62930fdd4c1e0b5f0477ff017d2a0279db79c9b0
-
SHA512
d45df3aa2d3be526da0ece1599152b3f6bcb9d0d1a2eede616fce15127ccb32d358a42febf4963f203022007a815efaf351c6943aa825e2abde44c9bd5794454
-
SSDEEP
3072:uCuqufbp2hjWktTu5PPy7gQ1R2hv3nBSG/b0tmCyeZZrTMVW84b7UNR:6qphjWkIE7g/JBN/b0tmCrrNPb7g
Static task
static1
Behavioral task
behavioral1
Sample
085c75648c690ddf61f9d9dd62930fdd4c1e0b5f0477ff017d2a0279db79c9b0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
085c75648c690ddf61f9d9dd62930fdd4c1e0b5f0477ff017d2a0279db79c9b0.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
085c75648c690ddf61f9d9dd62930fdd4c1e0b5f0477ff017d2a0279db79c9b0
-
Size
163KB
-
MD5
0fb955f43776ed2ab622ffd0f415c96f
-
SHA1
38b74fcd9d4361c3c694af9e5ff6f224e1afe309
-
SHA256
085c75648c690ddf61f9d9dd62930fdd4c1e0b5f0477ff017d2a0279db79c9b0
-
SHA512
d45df3aa2d3be526da0ece1599152b3f6bcb9d0d1a2eede616fce15127ccb32d358a42febf4963f203022007a815efaf351c6943aa825e2abde44c9bd5794454
-
SSDEEP
3072:uCuqufbp2hjWktTu5PPy7gQ1R2hv3nBSG/b0tmCyeZZrTMVW84b7UNR:6qphjWkIE7g/JBN/b0tmCrrNPb7g
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Suspicious use of SetThreadContext
-