General
-
Target
a5a129011ed3ac21005c27a4e8fa5850ef068e2ec0499ae13fe964e8d0f36d76
-
Size
42KB
-
Sample
221126-pz5vtade36
-
MD5
6b727a5da959dcedbb0d799a8d829d82
-
SHA1
427a2ca5ef5359a3b84b15f23799d8ed48fad65d
-
SHA256
a5a129011ed3ac21005c27a4e8fa5850ef068e2ec0499ae13fe964e8d0f36d76
-
SHA512
b8ec321790df4e687d9f0975e03520a62064b0cd676264b09cd5d924dbd5720619e9e1134db499669094b8bf8b12e628531486313f572755bb876be18ee04c04
-
SSDEEP
768:NCA3JXYQlZ6XAQPOli1GbWwmlN6aEZGVJ7drwaaGnbcuyD7Uni888Arp:IsJX3TqPFYQl4az/haGnouy8q
Behavioral task
behavioral1
Sample
a5a129011ed3ac21005c27a4e8fa5850ef068e2ec0499ae13fe964e8d0f36d76.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a5a129011ed3ac21005c27a4e8fa5850ef068e2ec0499ae13fe964e8d0f36d76.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
a5a129011ed3ac21005c27a4e8fa5850ef068e2ec0499ae13fe964e8d0f36d76
-
Size
42KB
-
MD5
6b727a5da959dcedbb0d799a8d829d82
-
SHA1
427a2ca5ef5359a3b84b15f23799d8ed48fad65d
-
SHA256
a5a129011ed3ac21005c27a4e8fa5850ef068e2ec0499ae13fe964e8d0f36d76
-
SHA512
b8ec321790df4e687d9f0975e03520a62064b0cd676264b09cd5d924dbd5720619e9e1134db499669094b8bf8b12e628531486313f572755bb876be18ee04c04
-
SSDEEP
768:NCA3JXYQlZ6XAQPOli1GbWwmlN6aEZGVJ7drwaaGnbcuyD7Uni888Arp:IsJX3TqPFYQl4az/haGnouy8q
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-