General

  • Target

    db7a94ad447367b7fe433e96a695e28f673732b085661e386ce064165e5f5542

  • Size

    392KB

  • Sample

    221203-za2rzach27

  • MD5

    af2128552eabd4babb6a1c62009b37ae

  • SHA1

    d76b5565dd06a9311da0341b24b2727b99fbf90b

  • SHA256

    db7a94ad447367b7fe433e96a695e28f673732b085661e386ce064165e5f5542

  • SHA512

    77d62dd522080df9494603be6b185809c971075defc424ace5a15cc3afacd02496d88201a63331336fa64a208b4b5e937c5fe38e49a02602ab9d45ccd82b80c5

  • SSDEEP

    6144:/+cdsMVwuY52sBtk7o/8RLzhcc1TBMmUtVmfjaROH0iva2ta6P96AF48kx71qwxM:c2akcQRh17UtQfmExaYHPg4QxpxM

Malware Config

Targets

    • Target

      db7a94ad447367b7fe433e96a695e28f673732b085661e386ce064165e5f5542

    • Size

      392KB

    • MD5

      af2128552eabd4babb6a1c62009b37ae

    • SHA1

      d76b5565dd06a9311da0341b24b2727b99fbf90b

    • SHA256

      db7a94ad447367b7fe433e96a695e28f673732b085661e386ce064165e5f5542

    • SHA512

      77d62dd522080df9494603be6b185809c971075defc424ace5a15cc3afacd02496d88201a63331336fa64a208b4b5e937c5fe38e49a02602ab9d45ccd82b80c5

    • SSDEEP

      6144:/+cdsMVwuY52sBtk7o/8RLzhcc1TBMmUtVmfjaROH0iva2ta6P96AF48kx71qwxM:c2akcQRh17UtQfmExaYHPg4QxpxM

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Matrix

Tasks