General

  • Target

    ff974eed3a39673cfe330cf7ed87521887301ab58b71d7dd2d6d15fc197313b5

  • Size

    781KB

  • MD5

    3bdd5d58ae0a3dfa5d317a7c6089f0d3

  • SHA1

    6d4657859442c62f205658104c03bf99a716a08b

  • SHA256

    ff974eed3a39673cfe330cf7ed87521887301ab58b71d7dd2d6d15fc197313b5

  • SHA512

    feefb336c05d4a1669015f649e56b6fc837f4a1e4def75f40e3945ebed23eafb6416b6057dafa97211881877043b932d2803c4c54dc08a7445712413f24a4d9b

  • SSDEEP

    12288:76efNNVqR/SjOV12bv3wamzM2wKrKuHKm+6JDSsc5cu3HuhnTw6yP4P2Axbo8:t1uSj5v3wLzpdHF7c7HWjj2A08

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family

Files

  • ff974eed3a39673cfe330cf7ed87521887301ab58b71d7dd2d6d15fc197313b5
    .rar
  • GeoIP.dat
  • Plugin/cam.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugin/ch.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugin/mic.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugin/plg.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugin/pw.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugin/sc2.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Stub.manifest
    .xml
  • WinMM.Net.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • njRAT v0.7d.exe
    .exe windows x86


    Headers

    Sections

  • stub.il
    .ps1