General
-
Target
eb9701862e73d70042e0afd61674454e565a49b79c3dd8e55ea29acb49c24e16
-
Size
59KB
-
Sample
221126-cnes2aea87
-
MD5
79ab66e013abc9d9f7b4e825e20283b2
-
SHA1
0a5c05660d082214a2ff9e37bf2fa5cc4f448b92
-
SHA256
eb9701862e73d70042e0afd61674454e565a49b79c3dd8e55ea29acb49c24e16
-
SHA512
df4c3e8e6f9ea2baaa31b1bc38773a18fb4731a3f5e37367730043bb5eee86454cc4557e4d030dc914e678287fd0e6b4eae96192882cdb9e977db16c7b99488f
-
SSDEEP
768:SXVhsuxgKxLWRbopTQHYNuVexBct0Q7TCe43Jl0aJh/zWX7sDYcj02O8KbvaMWwQ:SlhgHVHY8VMBSBilTJpzWLsUcM8gjML
Static task
static1
Behavioral task
behavioral1
Sample
eb9701862e73d70042e0afd61674454e565a49b79c3dd8e55ea29acb49c24e16.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
eb9701862e73d70042e0afd61674454e565a49b79c3dd8e55ea29acb49c24e16.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
eb9701862e73d70042e0afd61674454e565a49b79c3dd8e55ea29acb49c24e16
-
Size
59KB
-
MD5
79ab66e013abc9d9f7b4e825e20283b2
-
SHA1
0a5c05660d082214a2ff9e37bf2fa5cc4f448b92
-
SHA256
eb9701862e73d70042e0afd61674454e565a49b79c3dd8e55ea29acb49c24e16
-
SHA512
df4c3e8e6f9ea2baaa31b1bc38773a18fb4731a3f5e37367730043bb5eee86454cc4557e4d030dc914e678287fd0e6b4eae96192882cdb9e977db16c7b99488f
-
SSDEEP
768:SXVhsuxgKxLWRbopTQHYNuVexBct0Q7TCe43Jl0aJh/zWX7sDYcj02O8KbvaMWwQ:SlhgHVHY8VMBSBilTJpzWLsUcM8gjML
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-