General

  • Target

    b6e042b0fa5559315c0500ad91d22e02ad9e1bbb86d277a4cdf934d6781f2b5e

  • Size

    155KB

  • Sample

    221203-18cq6sad76

  • MD5

    d3bb560701d2b6ca0440c22c6679567e

  • SHA1

    d15f10faff11d1fbdc3bc2c6e114608ad1a177fd

  • SHA256

    b6e042b0fa5559315c0500ad91d22e02ad9e1bbb86d277a4cdf934d6781f2b5e

  • SHA512

    b24da9cf07a263723f6ed7b3efab8129211de89b78e5b715add601f8dbffe57aebf45c54cd7c76a3b1127ee55334f082ba4652b4f86a0a40e7d13faf7f216bcd

  • SSDEEP

    3072:FI3vzbT934wKn7Pbk+DFTz9rW8dUJXEtbiYHPy6Wq46kZg+uc3NCcoKB5jWoIEif:FsLbh34wK7o+DpJi8UObDtDHc3NCcnLE

Score
10/10

Malware Config

Targets

    • Target

      b6e042b0fa5559315c0500ad91d22e02ad9e1bbb86d277a4cdf934d6781f2b5e

    • Size

      155KB

    • MD5

      d3bb560701d2b6ca0440c22c6679567e

    • SHA1

      d15f10faff11d1fbdc3bc2c6e114608ad1a177fd

    • SHA256

      b6e042b0fa5559315c0500ad91d22e02ad9e1bbb86d277a4cdf934d6781f2b5e

    • SHA512

      b24da9cf07a263723f6ed7b3efab8129211de89b78e5b715add601f8dbffe57aebf45c54cd7c76a3b1127ee55334f082ba4652b4f86a0a40e7d13faf7f216bcd

    • SSDEEP

      3072:FI3vzbT934wKn7Pbk+DFTz9rW8dUJXEtbiYHPy6Wq46kZg+uc3NCcoKB5jWoIEif:FsLbh34wK7o+DpJi8UObDtDHc3NCcnLE

    Score
    10/10
    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Deletes itself

MITRE ATT&CK Matrix ATT&CK v6

Discovery

System Information Discovery

1
T1082

Tasks