General

  • Target

    9285cc65aedea7e0666a512218961e23a463989e84d2cf2617ebcdee2e6c60b6

  • Size

    1.1MB

  • Sample

    221203-k7hb9sdb8t

  • MD5

    b7fc6806a4f44f2331b580b3a9645737

  • SHA1

    cde95457dc08da993bdaa2b8e0f16b17bf6bf674

  • SHA256

    9285cc65aedea7e0666a512218961e23a463989e84d2cf2617ebcdee2e6c60b6

  • SHA512

    a4714161a967b34cb19856e2e2f2bab35aeb3c8a127808b54da8317806f90ee73dbf5550b45bac73944ce7568ad477e805db3094c5e2317caae278f6eb7d440e

  • SSDEEP

    24576:XsSBiTXqPTeQk3H7SD9jFBeb6QVYsyY2q7WokggYWTve2Tp:dgTXk/KbYFMruqKAgJreg

Score
10/10

Malware Config

Targets

    • Target

      9285cc65aedea7e0666a512218961e23a463989e84d2cf2617ebcdee2e6c60b6

    • Size

      1.1MB

    • MD5

      b7fc6806a4f44f2331b580b3a9645737

    • SHA1

      cde95457dc08da993bdaa2b8e0f16b17bf6bf674

    • SHA256

      9285cc65aedea7e0666a512218961e23a463989e84d2cf2617ebcdee2e6c60b6

    • SHA512

      a4714161a967b34cb19856e2e2f2bab35aeb3c8a127808b54da8317806f90ee73dbf5550b45bac73944ce7568ad477e805db3094c5e2317caae278f6eb7d440e

    • SSDEEP

      24576:XsSBiTXqPTeQk3H7SD9jFBeb6QVYsyY2q7WokggYWTve2Tp:dgTXk/KbYFMruqKAgJreg

    Score
    10/10
    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Matrix ATT&CK v6

Discovery

System Information Discovery

1
T1082

Tasks