General

  • Target

    80a90fe9b85528f18939cdf26f5bc511547bb5fcecf533bdcbe050d6ebbfb03f

  • Size

    1.3MB

  • Sample

    221201-c46xfsbe8t

  • MD5

    3ac7016163826d663ca503d5cf0c8c1c

  • SHA1

    e456722238c1aba734f54ed1ac5fd2232ffb1984

  • SHA256

    80a90fe9b85528f18939cdf26f5bc511547bb5fcecf533bdcbe050d6ebbfb03f

  • SHA512

    51350f49f7eea73787e9166973cf7a926be2642e23ad26f137e42207da46485aeeff3f6b4c4f867f0cc9fd3b42ad61c0230f960bc6fcd24edccfcef4e54edb5f

  • SSDEEP

    24576:/2c//////2TtYBXGGRyVgZnetZ4RMPw+ntcDzI+t01WF/L5:ec//////Ae5G6yVgZetEmJtcotsD

Score
10/10

Malware Config

Targets

    • Target

      80a90fe9b85528f18939cdf26f5bc511547bb5fcecf533bdcbe050d6ebbfb03f

    • Size

      1.3MB

    • MD5

      3ac7016163826d663ca503d5cf0c8c1c

    • SHA1

      e456722238c1aba734f54ed1ac5fd2232ffb1984

    • SHA256

      80a90fe9b85528f18939cdf26f5bc511547bb5fcecf533bdcbe050d6ebbfb03f

    • SHA512

      51350f49f7eea73787e9166973cf7a926be2642e23ad26f137e42207da46485aeeff3f6b4c4f867f0cc9fd3b42ad61c0230f960bc6fcd24edccfcef4e54edb5f

    • SSDEEP

      24576:/2c//////2TtYBXGGRyVgZnetZ4RMPw+ntcDzI+t01WF/L5:ec//////Ae5G6yVgZetEmJtcotsD

    Score
    10/10
    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks