General
-
Target
67a09ce3a6ac852a8d493d41ac68231c.bin
-
Size
334KB
-
Sample
230323-bpm1cscf35
-
MD5
41627c001f98b387547cbcf19fd9ae02
-
SHA1
611b7e9dc99c1623122c8cc9ed0c7f50af85113e
-
SHA256
ec35ea0764db185aab9e5c2bb4324e4220a11c282d957f14dd444932ab84e9b5
-
SHA512
2fd43652e2dc525f57fb1596bebd254d9f5fda3f1bb2ac42ab012f95dd5a414568a1e61d246b034f99fa411b7c5231021638b876d967a007677d63f237784322
-
SSDEEP
6144:gr3uTXpGNBQlS6QKMXbasJsLNp5H07kuvRRsZ0DRdrfjEu7Avuys2/B9NfXfc3wa:gLE14vXbZop5U7kuvRB/r7EYi9NPf2VP
Static task
static1
Behavioral task
behavioral1
Sample
1980f4cf17585ba77a0ca7596b1be2e928ead3e98f5cd80b1c005968275ef74d.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
1980f4cf17585ba77a0ca7596b1be2e928ead3e98f5cd80b1c005968275ef74d.exe
Resource
win10v2004-20230220-en
Malware Config
Targets
-
-
Target
1980f4cf17585ba77a0ca7596b1be2e928ead3e98f5cd80b1c005968275ef74d.exe
-
Size
665KB
-
MD5
67a09ce3a6ac852a8d493d41ac68231c
-
SHA1
0a4feb27fbf7af7465ffd3579cf79932ae64af61
-
SHA256
1980f4cf17585ba77a0ca7596b1be2e928ead3e98f5cd80b1c005968275ef74d
-
SHA512
02b2265c9c6c79569892f5f09b8d8c11e8dd6f287e4910927e4ee3891078acdf07437acdd9764ab59bb908731ab97b58eaccbff88dbc4f8da779009f0dd5e156
-
SSDEEP
12288:7xsnwyGGFm7NjhBBBHS4PKZr7j65hhxqeIpqOZODCFwxK:7yw0m5jhBBc4yZr7shCBiCix
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-