General
-
Target
db3c5b7ad4281991c3b1e6ff4a8506a88315bf068c2fbaa60c24c9214238bd9a
-
Size
367KB
-
Sample
221203-zrrnbshh7v
-
MD5
025637736b269921d1567d30bf788165
-
SHA1
3bac77b0671c4235fe7247429579a912fa79d7ba
-
SHA256
db3c5b7ad4281991c3b1e6ff4a8506a88315bf068c2fbaa60c24c9214238bd9a
-
SHA512
f85373a9e73fec734398138d424cbaaf4cc1db36969db0eb01b1ed46e2f4102295b616791c5ea1677968493f231ef5b8af22bdadbd0dbf594701bcb6d9f246b4
-
SSDEEP
6144:g/0uolCkQtmlxdpMo+JR6qVEO0FAA3Ny7lKD/PGq8JM9p9gT4ayMo2isG4PoE:gJzkncxajT7Ge9paTV9o2O4PoE
Static task
static1
Behavioral task
behavioral1
Sample
db3c5b7ad4281991c3b1e6ff4a8506a88315bf068c2fbaa60c24c9214238bd9a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
db3c5b7ad4281991c3b1e6ff4a8506a88315bf068c2fbaa60c24c9214238bd9a.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
db3c5b7ad4281991c3b1e6ff4a8506a88315bf068c2fbaa60c24c9214238bd9a
-
Size
367KB
-
MD5
025637736b269921d1567d30bf788165
-
SHA1
3bac77b0671c4235fe7247429579a912fa79d7ba
-
SHA256
db3c5b7ad4281991c3b1e6ff4a8506a88315bf068c2fbaa60c24c9214238bd9a
-
SHA512
f85373a9e73fec734398138d424cbaaf4cc1db36969db0eb01b1ed46e2f4102295b616791c5ea1677968493f231ef5b8af22bdadbd0dbf594701bcb6d9f246b4
-
SSDEEP
6144:g/0uolCkQtmlxdpMo+JR6qVEO0FAA3Ny7lKD/PGq8JM9p9gT4ayMo2isG4PoE:gJzkncxajT7Ge9paTV9o2O4PoE
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-