General

  • Target

    71f7fec3b0e40915474324f3c4c00fae4188019527399591ecf7b8b5cf83a72f

  • Size

    1.6MB

  • Sample

    221128-gwhl4sbd37

  • MD5

    13647bc0d7a131b1edb453947f869304

  • SHA1

    407b2dac9aa03653dad2d4d5724f915ef20284c3

  • SHA256

    71f7fec3b0e40915474324f3c4c00fae4188019527399591ecf7b8b5cf83a72f

  • SHA512

    86d51019e3ef0d023d93aff4bdbb6f55bc53c4cdfd96d8b41f97d9a4fdd980d9f2a332fcf971a2f41a30fcb54a0d7c51d75548a66bb7fc88d4237c25455aa9ed

  • SSDEEP

    49152:d5IqzraRU1IUQkuI5od5lBdAB4b2PD+GWO7:dMUyDkHqqL

Score
10/10

Malware Config

Targets

    • Target

      71f7fec3b0e40915474324f3c4c00fae4188019527399591ecf7b8b5cf83a72f

    • Size

      1.6MB

    • MD5

      13647bc0d7a131b1edb453947f869304

    • SHA1

      407b2dac9aa03653dad2d4d5724f915ef20284c3

    • SHA256

      71f7fec3b0e40915474324f3c4c00fae4188019527399591ecf7b8b5cf83a72f

    • SHA512

      86d51019e3ef0d023d93aff4bdbb6f55bc53c4cdfd96d8b41f97d9a4fdd980d9f2a332fcf971a2f41a30fcb54a0d7c51d75548a66bb7fc88d4237c25455aa9ed

    • SSDEEP

      49152:d5IqzraRU1IUQkuI5od5lBdAB4b2PD+GWO7:dMUyDkHqqL

    Score
    10/10
    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks