General
-
Target
ec3873b9136338a5b8d42353cf33ea70496e6f9768ff7779d087800b84d5492c
-
Size
668KB
-
Sample
221203-nqhhgsfe59
-
MD5
7434b6c4ee381a0c83e1a25305d5e29f
-
SHA1
9aaac47d1101c74cedb331a7e5a3c08d8a694f20
-
SHA256
ec3873b9136338a5b8d42353cf33ea70496e6f9768ff7779d087800b84d5492c
-
SHA512
79ad32bfb7a7fa3071e492ce110f8ba2902d89a657e3571769f008e84fc67a55ee3576e3e98b3dc6e9b53353fae9e00e1f565e278b606d3d727821da720cb7a4
-
SSDEEP
12288:1MkI8TndMPYINs+WaKOfXhFa8wodovujk2nWNYCZzl2C4D7pQRi1o/2rNoNSXf:1LhTnovpWaKOPapBywY+wHD7SRiKu2Yf
Static task
static1
Behavioral task
behavioral1
Sample
ec3873b9136338a5b8d42353cf33ea70496e6f9768ff7779d087800b84d5492c.exe
Resource
win7-20221111-en
Malware Config
Targets
-
-
Target
ec3873b9136338a5b8d42353cf33ea70496e6f9768ff7779d087800b84d5492c
-
Size
668KB
-
MD5
7434b6c4ee381a0c83e1a25305d5e29f
-
SHA1
9aaac47d1101c74cedb331a7e5a3c08d8a694f20
-
SHA256
ec3873b9136338a5b8d42353cf33ea70496e6f9768ff7779d087800b84d5492c
-
SHA512
79ad32bfb7a7fa3071e492ce110f8ba2902d89a657e3571769f008e84fc67a55ee3576e3e98b3dc6e9b53353fae9e00e1f565e278b606d3d727821da720cb7a4
-
SSDEEP
12288:1MkI8TndMPYINs+WaKOfXhFa8wodovujk2nWNYCZzl2C4D7pQRi1o/2rNoNSXf:1LhTnovpWaKOPapBywY+wHD7SRiKu2Yf
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Executes dropped EXE
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Adds Run key to start application
-