General
-
Target
4c958f5e33f0b0489a82ca5de0c34b921460b30511ca80c81c8d70607b5cf6e6
-
Size
152KB
-
Sample
221126-hk93naab87
-
MD5
0efce92c26e3eee29696cf694d1e7150
-
SHA1
a6f5c9e423ae9cb2ed13683771e5efd412af97b2
-
SHA256
4c958f5e33f0b0489a82ca5de0c34b921460b30511ca80c81c8d70607b5cf6e6
-
SHA512
8285366dbd26979d880829215cdaa1959c3e986207a4bd9a48487d061ca7bd54028fe7b6c66ff448de54362497f5ccf25e947bde7ef055cc2964f14c0c28b406
-
SSDEEP
1536:c1DMz1DQvXLq6t7awFONecenlLnQHIG5R9c73P600t:9eGw9A0rC00t
Static task
static1
Behavioral task
behavioral1
Sample
4c958f5e33f0b0489a82ca5de0c34b921460b30511ca80c81c8d70607b5cf6e6.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
4c958f5e33f0b0489a82ca5de0c34b921460b30511ca80c81c8d70607b5cf6e6.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
4c958f5e33f0b0489a82ca5de0c34b921460b30511ca80c81c8d70607b5cf6e6
-
Size
152KB
-
MD5
0efce92c26e3eee29696cf694d1e7150
-
SHA1
a6f5c9e423ae9cb2ed13683771e5efd412af97b2
-
SHA256
4c958f5e33f0b0489a82ca5de0c34b921460b30511ca80c81c8d70607b5cf6e6
-
SHA512
8285366dbd26979d880829215cdaa1959c3e986207a4bd9a48487d061ca7bd54028fe7b6c66ff448de54362497f5ccf25e947bde7ef055cc2964f14c0c28b406
-
SSDEEP
1536:c1DMz1DQvXLq6t7awFONecenlLnQHIG5R9c73P600t:9eGw9A0rC00t
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-