General
-
Target
9ffe65025ec1215d2e5f9f67e9121893d6a1aa24685e5eabde50a3d4a2f545ba
-
Size
868KB
-
Sample
221201-pd3tbsfb85
-
MD5
88cee30e5c0e1f1b87bef109209b9d9c
-
SHA1
40190ef8d6a159a24976bcbc9e2dcc3cb80e78ac
-
SHA256
9ffe65025ec1215d2e5f9f67e9121893d6a1aa24685e5eabde50a3d4a2f545ba
-
SHA512
455cbf0dcafe7c0e904e945c2ee9bcfbe14d7a779fafb70e54d2852fa5cf3f415da82daa853830dc103c57e6d7425640e2806e6586641232089021c334e57a81
-
SSDEEP
24576:iU4LZtRljj6j8jjjjjjmjjjjjjnjeLva3we5/SI34AdhNDQjTjo:D4LZtRnw9SIIAdhNDQjTs
Static task
static1
Behavioral task
behavioral1
Sample
9ffe65025ec1215d2e5f9f67e9121893d6a1aa24685e5eabde50a3d4a2f545ba.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9ffe65025ec1215d2e5f9f67e9121893d6a1aa24685e5eabde50a3d4a2f545ba.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
9ffe65025ec1215d2e5f9f67e9121893d6a1aa24685e5eabde50a3d4a2f545ba
-
Size
868KB
-
MD5
88cee30e5c0e1f1b87bef109209b9d9c
-
SHA1
40190ef8d6a159a24976bcbc9e2dcc3cb80e78ac
-
SHA256
9ffe65025ec1215d2e5f9f67e9121893d6a1aa24685e5eabde50a3d4a2f545ba
-
SHA512
455cbf0dcafe7c0e904e945c2ee9bcfbe14d7a779fafb70e54d2852fa5cf3f415da82daa853830dc103c57e6d7425640e2806e6586641232089021c334e57a81
-
SSDEEP
24576:iU4LZtRljj6j8jjjjjjmjjjjjjnjeLva3we5/SI34AdhNDQjTjo:D4LZtRnw9SIIAdhNDQjTs
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Adds Run key to start application
-