General

  • Target

    84acab53166b7d70decf677e226eefa46bbda1a92d8a24b62aa749774e7a2bea

  • Size

    767KB

  • Sample

    221201-ceernshd3s

  • MD5

    463e78d8aeb61fd623facfcbfebbf15b

  • SHA1

    188b7930897c90c88e01658977d641fda7df3de1

  • SHA256

    84acab53166b7d70decf677e226eefa46bbda1a92d8a24b62aa749774e7a2bea

  • SHA512

    c00332dff42eeca42e087c69e94b07f4d756467db0d0ec667ffe7f3c700e0a8075e3e3d2c78f4b8d577a8a4d4a54365f84ca41c49ca157ed1ce381ce8115b9dc

  • SSDEEP

    12288:P9Ec//////bxWdMiRf4JyVTBvvC92rdmT3XH7QyQdZCaql0UfhuxAvhFrMjEyU7i:lEc//////bs2iRf4JSXC92h83XogaVw0

Score
10/10

Malware Config

Targets

    • Target

      84acab53166b7d70decf677e226eefa46bbda1a92d8a24b62aa749774e7a2bea

    • Size

      767KB

    • MD5

      463e78d8aeb61fd623facfcbfebbf15b

    • SHA1

      188b7930897c90c88e01658977d641fda7df3de1

    • SHA256

      84acab53166b7d70decf677e226eefa46bbda1a92d8a24b62aa749774e7a2bea

    • SHA512

      c00332dff42eeca42e087c69e94b07f4d756467db0d0ec667ffe7f3c700e0a8075e3e3d2c78f4b8d577a8a4d4a54365f84ca41c49ca157ed1ce381ce8115b9dc

    • SSDEEP

      12288:P9Ec//////bxWdMiRf4JyVTBvvC92rdmT3XH7QyQdZCaql0UfhuxAvhFrMjEyU7i:lEc//////bs2iRf4JSXC92h83XogaVw0

    Score
    10/10
    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks