General
-
Target
5b063178bfb6fe9ebb57ef48d22455d946875476a0c10eaed099c89989805785
-
Size
251KB
-
Sample
221201-et8dmsdb57
-
MD5
5b5597a16520185a82391aae8bc8354f
-
SHA1
2bb38fac339f845e3c567a4ddbeb07a54d499282
-
SHA256
5b063178bfb6fe9ebb57ef48d22455d946875476a0c10eaed099c89989805785
-
SHA512
edd80ee7a76af421fa8f38c3b8915f5472cd6cc630824c5884dbe92889c6d8f2f48662474427f0c04b71128d23d1045da97200fda366d88f8f2d064986ed886e
-
SSDEEP
6144:lUSaQY0KF2Il/2mlewNGYz78isbDzlcUIt4/8RpNU:xaQy950wNGs3MDzsUoY
Static task
static1
Behavioral task
behavioral1
Sample
5b063178bfb6fe9ebb57ef48d22455d946875476a0c10eaed099c89989805785.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5b063178bfb6fe9ebb57ef48d22455d946875476a0c10eaed099c89989805785.exe
Resource
win10v2004-20220901-en
Malware Config
Targets
-
-
Target
5b063178bfb6fe9ebb57ef48d22455d946875476a0c10eaed099c89989805785
-
Size
251KB
-
MD5
5b5597a16520185a82391aae8bc8354f
-
SHA1
2bb38fac339f845e3c567a4ddbeb07a54d499282
-
SHA256
5b063178bfb6fe9ebb57ef48d22455d946875476a0c10eaed099c89989805785
-
SHA512
edd80ee7a76af421fa8f38c3b8915f5472cd6cc630824c5884dbe92889c6d8f2f48662474427f0c04b71128d23d1045da97200fda366d88f8f2d064986ed886e
-
SSDEEP
6144:lUSaQY0KF2Il/2mlewNGYz78isbDzlcUIt4/8RpNU:xaQy950wNGs3MDzsUoY
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Modifies Installed Components in the registry
-
Adds Run key to start application
-