General
-
Target
c838e17a32c8d80c2c5362790f71ecbdf769a47f791142bf059f03ab019b8b1b
-
Size
152KB
-
Sample
221126-hk7mjaab84
-
MD5
06314ce9ca99be1d815210a9feee5150
-
SHA1
71449feae3ca4dc86f5205c45d5bac972587af84
-
SHA256
c838e17a32c8d80c2c5362790f71ecbdf769a47f791142bf059f03ab019b8b1b
-
SHA512
e87d6ff9778b5d301178b682fea794d871a2ad30d8710e42de6c056a5ba2be2ec90e84b51c734fe4d2be0e2ec4cb2172f179421f6656a15d5c46ca26ecfdbea1
-
SSDEEP
1536:c1DMz1DQvXLq6t7awFONecenlLnQHIG5R9c73P600t:9eGw9A0rC00t
Static task
static1
Behavioral task
behavioral1
Sample
c838e17a32c8d80c2c5362790f71ecbdf769a47f791142bf059f03ab019b8b1b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c838e17a32c8d80c2c5362790f71ecbdf769a47f791142bf059f03ab019b8b1b.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
c838e17a32c8d80c2c5362790f71ecbdf769a47f791142bf059f03ab019b8b1b
-
Size
152KB
-
MD5
06314ce9ca99be1d815210a9feee5150
-
SHA1
71449feae3ca4dc86f5205c45d5bac972587af84
-
SHA256
c838e17a32c8d80c2c5362790f71ecbdf769a47f791142bf059f03ab019b8b1b
-
SHA512
e87d6ff9778b5d301178b682fea794d871a2ad30d8710e42de6c056a5ba2be2ec90e84b51c734fe4d2be0e2ec4cb2172f179421f6656a15d5c46ca26ecfdbea1
-
SSDEEP
1536:c1DMz1DQvXLq6t7awFONecenlLnQHIG5R9c73P600t:9eGw9A0rC00t
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-