General

  • Target

    ee1892ae690ddc08cfc6dd6da06dec77320904aedcf6b7bc1c97109da21a5e91

  • Size

    893KB

  • Sample

    221203-zbnazach72

  • MD5

    3f6a3fafa78dfaa7e1a1ea36a437c164

  • SHA1

    810e558ec9343455fe74aeb5f6fe6608bb462c55

  • SHA256

    ee1892ae690ddc08cfc6dd6da06dec77320904aedcf6b7bc1c97109da21a5e91

  • SHA512

    e073d90040e516d1be726f802a674e190568de047d0b7ee35e450c6fdc83d23442906cc58a1b464168b8887764d1e8f61b6ed3b322fa1703048ced2eea72beff

  • SSDEEP

    24576:1oK9U9Z5Y4+YSembcj3jtpTm7bUDWzPuNML851cM9wAYtQx:1oQU9Z5Y4+YSembcj3jjTcDuNML851cy

Score
10/10

Malware Config

Targets

    • Target

      ee1892ae690ddc08cfc6dd6da06dec77320904aedcf6b7bc1c97109da21a5e91

    • Size

      893KB

    • MD5

      3f6a3fafa78dfaa7e1a1ea36a437c164

    • SHA1

      810e558ec9343455fe74aeb5f6fe6608bb462c55

    • SHA256

      ee1892ae690ddc08cfc6dd6da06dec77320904aedcf6b7bc1c97109da21a5e91

    • SHA512

      e073d90040e516d1be726f802a674e190568de047d0b7ee35e450c6fdc83d23442906cc58a1b464168b8887764d1e8f61b6ed3b322fa1703048ced2eea72beff

    • SSDEEP

      24576:1oK9U9Z5Y4+YSembcj3jtpTm7bUDWzPuNML851cM9wAYtQx:1oQU9Z5Y4+YSembcj3jjTcDuNML851cy

    Score
    10/10
    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Collection

    Command and Control

      Credential Access

        Defense Evasion

          Discovery

            Execution

              Exfiltration

                Impact

                  Initial Access

                    Lateral Movement

                      Persistence

                        Privilege Escalation

                          Tasks