General
-
Target
msmanager.exe
-
Size
6.6MB
-
Sample
230405-g8tvxaeb7v
-
MD5
81b98c4f6a58ef701fe2a80a0d65c100
-
SHA1
716118e823ac82284b1c25a49487d145444d08be
-
SHA256
4004fa2b2d7a2a63021006ae02cd0a9dfc10d1a01b29cea908e6e4f25344776f
-
SHA512
d36b0b2ccccb3f71d960635e673d4f5de70baa6dc94dcb4d8d49e2a86b00bdb04547eea669d0a3da950f4afb837b3a8bbe6c4efd757fc02c03fb62e60f9ae39e
-
SSDEEP
98304:E7Xi3M05WiM5JpnKahcRgzuyczkBldS1u+QRtC3RYPTn5FC/W1ZNqDpbvgF:ErEM1iM5PKTaGkbdou+FYPz3NqNbI
Behavioral task
behavioral1
Sample
msmanager.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
msmanager.exe
Resource
win10v2004-20230220-en
Malware Config
Targets
-
-
Target
msmanager.exe
-
Size
6.6MB
-
MD5
81b98c4f6a58ef701fe2a80a0d65c100
-
SHA1
716118e823ac82284b1c25a49487d145444d08be
-
SHA256
4004fa2b2d7a2a63021006ae02cd0a9dfc10d1a01b29cea908e6e4f25344776f
-
SHA512
d36b0b2ccccb3f71d960635e673d4f5de70baa6dc94dcb4d8d49e2a86b00bdb04547eea669d0a3da950f4afb837b3a8bbe6c4efd757fc02c03fb62e60f9ae39e
-
SSDEEP
98304:E7Xi3M05WiM5JpnKahcRgzuyczkBldS1u+QRtC3RYPTn5FC/W1ZNqDpbvgF:ErEM1iM5PKTaGkbdou+FYPz3NqNbI
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader First Stage
-