General
-
Target
1e287399a0dc5b3be713093bd50f6edc954fd3f9bbc5bffbfda0a4f5c1e44a6a
-
Size
83KB
-
Sample
221126-sl4blsda26
-
MD5
b5958a2c63e59250f7a685920b80e7db
-
SHA1
8af59c9bdd941ab0b2f170beb818bd12a2ac49ba
-
SHA256
1e287399a0dc5b3be713093bd50f6edc954fd3f9bbc5bffbfda0a4f5c1e44a6a
-
SHA512
9df729e19609c6825cec53582494b4ffd51ce5235a2a6b7e887e381356052fddb8c36e0cd43c8321655fbeae6ad9acf5a652cbbc1fa1fc23c9c462004de9d0dc
-
SSDEEP
1536:sa2PR95ZSvRU4Sh4/1Hh0iI9o5SKvp4nw6vgqnAZGlI97c4gNha3:IPLDSpucHCiI6LBBnqAZG4
Static task
static1
Behavioral task
behavioral1
Sample
1e287399a0dc5b3be713093bd50f6edc954fd3f9bbc5bffbfda0a4f5c1e44a6a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1e287399a0dc5b3be713093bd50f6edc954fd3f9bbc5bffbfda0a4f5c1e44a6a.exe
Resource
win10v2004-20220901-en
Malware Config
Targets
-
-
Target
1e287399a0dc5b3be713093bd50f6edc954fd3f9bbc5bffbfda0a4f5c1e44a6a
-
Size
83KB
-
MD5
b5958a2c63e59250f7a685920b80e7db
-
SHA1
8af59c9bdd941ab0b2f170beb818bd12a2ac49ba
-
SHA256
1e287399a0dc5b3be713093bd50f6edc954fd3f9bbc5bffbfda0a4f5c1e44a6a
-
SHA512
9df729e19609c6825cec53582494b4ffd51ce5235a2a6b7e887e381356052fddb8c36e0cd43c8321655fbeae6ad9acf5a652cbbc1fa1fc23c9c462004de9d0dc
-
SSDEEP
1536:sa2PR95ZSvRU4Sh4/1Hh0iI9o5SKvp4nw6vgqnAZGlI97c4gNha3:IPLDSpucHCiI6LBBnqAZG4
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-