General
-
Target
876dcce6707c545b8ddd4ff040139427dfac919389743eb6fc5a8ceb5436e8ce
-
Size
375KB
-
Sample
221203-kddf8abh71
-
MD5
7a8b3bdfbe2bb3201f9e149ec7822dd0
-
SHA1
ccdf7abc55f9765212c199e2325d1486c9cde1ec
-
SHA256
876dcce6707c545b8ddd4ff040139427dfac919389743eb6fc5a8ceb5436e8ce
-
SHA512
8458681e344b893c55519dc38c434904e90c34b0cf590e9db102503bdf096dee0438e050d3e5288aa5b4238178951672889de5bdf64bcd4e8b90cb41f5231648
-
SSDEEP
6144:m4amIhuZn1rnw5xyPRV+6PdsjVwuJvUkZ9hboCOaJCoafCWiYXmJlt1kc/ql:Lnw5xy5VOvnfQ2d1kz
Behavioral task
behavioral1
Sample
876dcce6707c545b8ddd4ff040139427dfac919389743eb6fc5a8ceb5436e8ce.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
876dcce6707c545b8ddd4ff040139427dfac919389743eb6fc5a8ceb5436e8ce.exe
Resource
win10v2004-20220901-en
Malware Config
Targets
-
-
Target
876dcce6707c545b8ddd4ff040139427dfac919389743eb6fc5a8ceb5436e8ce
-
Size
375KB
-
MD5
7a8b3bdfbe2bb3201f9e149ec7822dd0
-
SHA1
ccdf7abc55f9765212c199e2325d1486c9cde1ec
-
SHA256
876dcce6707c545b8ddd4ff040139427dfac919389743eb6fc5a8ceb5436e8ce
-
SHA512
8458681e344b893c55519dc38c434904e90c34b0cf590e9db102503bdf096dee0438e050d3e5288aa5b4238178951672889de5bdf64bcd4e8b90cb41f5231648
-
SSDEEP
6144:m4amIhuZn1rnw5xyPRV+6PdsjVwuJvUkZ9hboCOaJCoafCWiYXmJlt1kc/ql:Lnw5xy5VOvnfQ2d1kz
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Sets DLL path for service in the registry
-
Deletes itself
-
Loads dropped DLL
-
Drops file in System32 directory
-