General
-
Target
38c13439c04b5ff94bf36da85dfbaade55fb1d35828c3f1c2e12019d960c7476
-
Size
152KB
-
Sample
221126-hlbw9add4s
-
MD5
b362ab99184a0c2cf2955f2bfcc29470
-
SHA1
9fce4baf8a20be83ab047804920d96ea5f7512d0
-
SHA256
38c13439c04b5ff94bf36da85dfbaade55fb1d35828c3f1c2e12019d960c7476
-
SHA512
1982a3ce7312a860be31fd1a03675af24430cab7b4bdce9bc800b6881a5d6c0a34eea16f74e224243f312faf107e0774db8540d481806c2f50febf263e0471d1
-
SSDEEP
1536:c1DMz1DQvXLq6t7awFONecenlLnQHIG5R9c73P600t:9eGw9A0rC00t
Static task
static1
Behavioral task
behavioral1
Sample
38c13439c04b5ff94bf36da85dfbaade55fb1d35828c3f1c2e12019d960c7476.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
38c13439c04b5ff94bf36da85dfbaade55fb1d35828c3f1c2e12019d960c7476.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
38c13439c04b5ff94bf36da85dfbaade55fb1d35828c3f1c2e12019d960c7476
-
Size
152KB
-
MD5
b362ab99184a0c2cf2955f2bfcc29470
-
SHA1
9fce4baf8a20be83ab047804920d96ea5f7512d0
-
SHA256
38c13439c04b5ff94bf36da85dfbaade55fb1d35828c3f1c2e12019d960c7476
-
SHA512
1982a3ce7312a860be31fd1a03675af24430cab7b4bdce9bc800b6881a5d6c0a34eea16f74e224243f312faf107e0774db8540d481806c2f50febf263e0471d1
-
SSDEEP
1536:c1DMz1DQvXLq6t7awFONecenlLnQHIG5R9c73P600t:9eGw9A0rC00t
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-