General
-
Target
80a90fe9b85528f18939cdf26f5bc511547bb5fcecf533bdcbe050d6ebbfb03f
-
Size
1.3MB
-
Sample
221201-c46xfsbe8t
-
MD5
3ac7016163826d663ca503d5cf0c8c1c
-
SHA1
e456722238c1aba734f54ed1ac5fd2232ffb1984
-
SHA256
80a90fe9b85528f18939cdf26f5bc511547bb5fcecf533bdcbe050d6ebbfb03f
-
SHA512
51350f49f7eea73787e9166973cf7a926be2642e23ad26f137e42207da46485aeeff3f6b4c4f867f0cc9fd3b42ad61c0230f960bc6fcd24edccfcef4e54edb5f
-
SSDEEP
24576:/2c//////2TtYBXGGRyVgZnetZ4RMPw+ntcDzI+t01WF/L5:ec//////Ae5G6yVgZetEmJtcotsD
Static task
static1
Behavioral task
behavioral1
Sample
80a90fe9b85528f18939cdf26f5bc511547bb5fcecf533bdcbe050d6ebbfb03f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
80a90fe9b85528f18939cdf26f5bc511547bb5fcecf533bdcbe050d6ebbfb03f.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
80a90fe9b85528f18939cdf26f5bc511547bb5fcecf533bdcbe050d6ebbfb03f
-
Size
1.3MB
-
MD5
3ac7016163826d663ca503d5cf0c8c1c
-
SHA1
e456722238c1aba734f54ed1ac5fd2232ffb1984
-
SHA256
80a90fe9b85528f18939cdf26f5bc511547bb5fcecf533bdcbe050d6ebbfb03f
-
SHA512
51350f49f7eea73787e9166973cf7a926be2642e23ad26f137e42207da46485aeeff3f6b4c4f867f0cc9fd3b42ad61c0230f960bc6fcd24edccfcef4e54edb5f
-
SSDEEP
24576:/2c//////2TtYBXGGRyVgZnetZ4RMPw+ntcDzI+t01WF/L5:ec//////Ae5G6yVgZetEmJtcotsD
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious use of SetThreadContext
-