General
-
Target
3176925d4b5aba5e3bf50acecf50b5ddaeb2b9adc58771457bcc2fe7fd65ea60
-
Size
114KB
-
Sample
221201-j2pzgsdd3y
-
MD5
f4021bdbbe3ecf82becf00cfa2c2a9ca
-
SHA1
3e74b02dc8c60d142a493f56170d565076faaa01
-
SHA256
3176925d4b5aba5e3bf50acecf50b5ddaeb2b9adc58771457bcc2fe7fd65ea60
-
SHA512
8a61af33908088e6a034d9b6bc03960ca68d728a2a3a368ad995df2ee10e71dfb16f1da7ce405047504b797f3a8b46c395bf2ae2176c2ce4a16df2861e246d6c
-
SSDEEP
3072:SA25p4WcKp84DCJYqV/9amEgvTX2XUTQNZWA7leilfddI7Fr:32LrqV8mE6GXUTQNZNl7vd4
Static task
static1
Behavioral task
behavioral1
Sample
3176925d4b5aba5e3bf50acecf50b5ddaeb2b9adc58771457bcc2fe7fd65ea60.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3176925d4b5aba5e3bf50acecf50b5ddaeb2b9adc58771457bcc2fe7fd65ea60.exe
Resource
win10v2004-20220901-en
Malware Config
Targets
-
-
Target
3176925d4b5aba5e3bf50acecf50b5ddaeb2b9adc58771457bcc2fe7fd65ea60
-
Size
114KB
-
MD5
f4021bdbbe3ecf82becf00cfa2c2a9ca
-
SHA1
3e74b02dc8c60d142a493f56170d565076faaa01
-
SHA256
3176925d4b5aba5e3bf50acecf50b5ddaeb2b9adc58771457bcc2fe7fd65ea60
-
SHA512
8a61af33908088e6a034d9b6bc03960ca68d728a2a3a368ad995df2ee10e71dfb16f1da7ce405047504b797f3a8b46c395bf2ae2176c2ce4a16df2861e246d6c
-
SSDEEP
3072:SA25p4WcKp84DCJYqV/9amEgvTX2XUTQNZWA7leilfddI7Fr:32LrqV8mE6GXUTQNZNl7vd4
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Uses the VBS compiler for execution
-
Suspicious use of SetThreadContext
-