General
-
Target
SERTRANS AVIS E.T.23.00570 34 KM 7063.zip
-
Size
473KB
-
Sample
230222-d9lzxahf85
-
MD5
6beadd745540cf048d6555380c888fb4
-
SHA1
5125a3739d539e66d36cb54672deef206b80b502
-
SHA256
6b817ce95ecc5fb206ddbdf3e993ce1af68a94adfacdd49ca6b445f657c6408e
-
SHA512
6ed063463fff924f527a965c2fef75abf35b1453f142c7bb1fe0cca50ad701e0bed30cbd36cd6738fa453911888555fa093ed81f3ed75f33d4932b7c3c6ee57f
-
SSDEEP
12288:SfD2ovo6j7FyxEx62FJ9biC5GlTRkV49ubllTBCHak7KQ0y:SfyovfjQqx62FHGIXNBKKu
Static task
static1
Behavioral task
behavioral1
Sample
SERTRANS AVIS E.T.23.00570 34 KM 7063.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
SERTRANS AVIS E.T.23.00570 34 KM 7063.exe
Resource
win10v2004-20230220-en
Malware Config
Targets
-
-
Target
SERTRANS AVIS E.T.23.00570 34 KM 7063.exe
-
Size
877KB
-
MD5
555f8e6d1e1bf60b8333d3d61d3dcffc
-
SHA1
89c6a7248ecaa7106ee531da04e7a7f04a2afaa2
-
SHA256
fe00e119b458a66637943f295177d6763e05f88b8dd6ec9268d8b09763979093
-
SHA512
94cedeba328f315062e973f41f270a21e586b716ba316191b1e34eb8196caf544911bc9440ba4d6547dcc0a206300f976f3ccb8e279b069723f68bb39447d987
-
SSDEEP
12288:O9eu4QUqmzouRvfkK10/ngIlubJA7pXUKPpj1RwSD1D/WJ5QblAc6FgMHOygt:O9B4cuRHLkVS8pjTtDQrClp6FFu/
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-