General

  • Target

    3176925d4b5aba5e3bf50acecf50b5ddaeb2b9adc58771457bcc2fe7fd65ea60

  • Size

    114KB

  • Sample

    221201-j2pzgsdd3y

  • MD5

    f4021bdbbe3ecf82becf00cfa2c2a9ca

  • SHA1

    3e74b02dc8c60d142a493f56170d565076faaa01

  • SHA256

    3176925d4b5aba5e3bf50acecf50b5ddaeb2b9adc58771457bcc2fe7fd65ea60

  • SHA512

    8a61af33908088e6a034d9b6bc03960ca68d728a2a3a368ad995df2ee10e71dfb16f1da7ce405047504b797f3a8b46c395bf2ae2176c2ce4a16df2861e246d6c

  • SSDEEP

    3072:SA25p4WcKp84DCJYqV/9amEgvTX2XUTQNZWA7leilfddI7Fr:32LrqV8mE6GXUTQNZNl7vd4

Score
10/10

Malware Config

Targets

    • Target

      3176925d4b5aba5e3bf50acecf50b5ddaeb2b9adc58771457bcc2fe7fd65ea60

    • Size

      114KB

    • MD5

      f4021bdbbe3ecf82becf00cfa2c2a9ca

    • SHA1

      3e74b02dc8c60d142a493f56170d565076faaa01

    • SHA256

      3176925d4b5aba5e3bf50acecf50b5ddaeb2b9adc58771457bcc2fe7fd65ea60

    • SHA512

      8a61af33908088e6a034d9b6bc03960ca68d728a2a3a368ad995df2ee10e71dfb16f1da7ce405047504b797f3a8b46c395bf2ae2176c2ce4a16df2861e246d6c

    • SSDEEP

      3072:SA25p4WcKp84DCJYqV/9amEgvTX2XUTQNZWA7leilfddI7Fr:32LrqV8mE6GXUTQNZNl7vd4

    Score
    10/10
    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Uses the VBS compiler for execution

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix ATT&CK v6

Execution

Scripting

1
T1064

Defense Evasion

Scripting

1
T1064

Tasks