General
-
Target
b6e042b0fa5559315c0500ad91d22e02ad9e1bbb86d277a4cdf934d6781f2b5e
-
Size
155KB
-
Sample
221203-18cq6sad76
-
MD5
d3bb560701d2b6ca0440c22c6679567e
-
SHA1
d15f10faff11d1fbdc3bc2c6e114608ad1a177fd
-
SHA256
b6e042b0fa5559315c0500ad91d22e02ad9e1bbb86d277a4cdf934d6781f2b5e
-
SHA512
b24da9cf07a263723f6ed7b3efab8129211de89b78e5b715add601f8dbffe57aebf45c54cd7c76a3b1127ee55334f082ba4652b4f86a0a40e7d13faf7f216bcd
-
SSDEEP
3072:FI3vzbT934wKn7Pbk+DFTz9rW8dUJXEtbiYHPy6Wq46kZg+uc3NCcoKB5jWoIEif:FsLbh34wK7o+DpJi8UObDtDHc3NCcnLE
Static task
static1
Behavioral task
behavioral1
Sample
b6e042b0fa5559315c0500ad91d22e02ad9e1bbb86d277a4cdf934d6781f2b5e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b6e042b0fa5559315c0500ad91d22e02ad9e1bbb86d277a4cdf934d6781f2b5e.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
b6e042b0fa5559315c0500ad91d22e02ad9e1bbb86d277a4cdf934d6781f2b5e
-
Size
155KB
-
MD5
d3bb560701d2b6ca0440c22c6679567e
-
SHA1
d15f10faff11d1fbdc3bc2c6e114608ad1a177fd
-
SHA256
b6e042b0fa5559315c0500ad91d22e02ad9e1bbb86d277a4cdf934d6781f2b5e
-
SHA512
b24da9cf07a263723f6ed7b3efab8129211de89b78e5b715add601f8dbffe57aebf45c54cd7c76a3b1127ee55334f082ba4652b4f86a0a40e7d13faf7f216bcd
-
SSDEEP
3072:FI3vzbT934wKn7Pbk+DFTz9rW8dUJXEtbiYHPy6Wq46kZg+uc3NCcoKB5jWoIEif:FsLbh34wK7o+DpJi8UObDtDHc3NCcnLE
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Executes dropped EXE
-
Deletes itself
-