General
-
Target
f6f235ad56e1e5e13eedfec57c327323e7e581a1a27c5425373301d742418613
-
Size
152KB
-
Sample
221126-hk4wmsab77
-
MD5
0261eb6084102f209b7815c3ed92f8a0
-
SHA1
d03c1a6db93140a9c56569c9a189ac32241925a5
-
SHA256
f6f235ad56e1e5e13eedfec57c327323e7e581a1a27c5425373301d742418613
-
SHA512
ffc9ce84b76841c7cc518e11b651342f037974b3adfc89e0b29471da4f141dc3886f9e51673a472643e01962ef2aee29418620dde48f3dcc7028027ce6074a6c
-
SSDEEP
1536:c1DMz1DQvXLq6t7awFONecenlLnQHIG5R9c73P600t:9eGw9A0rC00t
Static task
static1
Behavioral task
behavioral1
Sample
f6f235ad56e1e5e13eedfec57c327323e7e581a1a27c5425373301d742418613.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f6f235ad56e1e5e13eedfec57c327323e7e581a1a27c5425373301d742418613.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
f6f235ad56e1e5e13eedfec57c327323e7e581a1a27c5425373301d742418613
-
Size
152KB
-
MD5
0261eb6084102f209b7815c3ed92f8a0
-
SHA1
d03c1a6db93140a9c56569c9a189ac32241925a5
-
SHA256
f6f235ad56e1e5e13eedfec57c327323e7e581a1a27c5425373301d742418613
-
SHA512
ffc9ce84b76841c7cc518e11b651342f037974b3adfc89e0b29471da4f141dc3886f9e51673a472643e01962ef2aee29418620dde48f3dcc7028027ce6074a6c
-
SSDEEP
1536:c1DMz1DQvXLq6t7awFONecenlLnQHIG5R9c73P600t:9eGw9A0rC00t
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-