General
-
Target
dcfe18e69ef2c39dcad539403760f0fe8660e34d9dc03755d2c851e869aa1c94
-
Size
299KB
-
Sample
221201-pl4qlabc81
-
MD5
063430073f90b08415ce6c16595b8ac3
-
SHA1
47bf7ff27639c8ec74fd66ac08ac35ea971cff47
-
SHA256
dcfe18e69ef2c39dcad539403760f0fe8660e34d9dc03755d2c851e869aa1c94
-
SHA512
4dfadff891e8b6080b2d7200164fa4987482940a70deb3f8acd67d8aed1d2177dfe6a438e75a5b0d91e8d4683f6cc95e996cde1ccb9767e6ebf9ef6cc0bef01a
-
SSDEEP
6144:RXKbu6yLJJtee7EVvBt2leqHu1eWaXZDfmvF2NJPHfM4YtSAK+nqN:RXKq66LekOYeqHu9aXZDONiJPHfM4BF
Static task
static1
Behavioral task
behavioral1
Sample
dcfe18e69ef2c39dcad539403760f0fe8660e34d9dc03755d2c851e869aa1c94.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dcfe18e69ef2c39dcad539403760f0fe8660e34d9dc03755d2c851e869aa1c94.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
dcfe18e69ef2c39dcad539403760f0fe8660e34d9dc03755d2c851e869aa1c94
-
Size
299KB
-
MD5
063430073f90b08415ce6c16595b8ac3
-
SHA1
47bf7ff27639c8ec74fd66ac08ac35ea971cff47
-
SHA256
dcfe18e69ef2c39dcad539403760f0fe8660e34d9dc03755d2c851e869aa1c94
-
SHA512
4dfadff891e8b6080b2d7200164fa4987482940a70deb3f8acd67d8aed1d2177dfe6a438e75a5b0d91e8d4683f6cc95e996cde1ccb9767e6ebf9ef6cc0bef01a
-
SSDEEP
6144:RXKbu6yLJJtee7EVvBt2leqHu1eWaXZDfmvF2NJPHfM4YtSAK+nqN:RXKq66LekOYeqHu9aXZDONiJPHfM4BF
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-