General
-
Target
U prilogu je lista narudzbi.exe
-
Size
836KB
-
Sample
230412-jn9rqsag99
-
MD5
abbbf31e0e15090c883a673d83596142
-
SHA1
67374656097e81de7a179c3ae9b4e8f1ceea4490
-
SHA256
9d51946e1701a0331cdb1dd4c391ace7e767276f885733d67dfcf91a71f2c013
-
SHA512
454d024927cd59105ba1ab77f3654828d224765c7ae437171d0ffe2cef9b207d3cd9ccae0940afc5d169c1fc434d70a5a2d88cb0625876e81cbf73aa304082c7
-
SSDEEP
12288:T8rLgxLKQfJJuXFI3MU+oVv6G57D1llttQCMO+U1xldIuau/T2SAzCk1:wrLgO0023ZQK9CO+U1xldqu/T2SA
Static task
static1
Behavioral task
behavioral1
Sample
U prilogu je lista narudzbi.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
U prilogu je lista narudzbi.exe
Resource
win10v2004-20230220-en
Malware Config
Targets
-
-
Target
U prilogu je lista narudzbi.exe
-
Size
836KB
-
MD5
abbbf31e0e15090c883a673d83596142
-
SHA1
67374656097e81de7a179c3ae9b4e8f1ceea4490
-
SHA256
9d51946e1701a0331cdb1dd4c391ace7e767276f885733d67dfcf91a71f2c013
-
SHA512
454d024927cd59105ba1ab77f3654828d224765c7ae437171d0ffe2cef9b207d3cd9ccae0940afc5d169c1fc434d70a5a2d88cb0625876e81cbf73aa304082c7
-
SSDEEP
12288:T8rLgxLKQfJJuXFI3MU+oVv6G57D1llttQCMO+U1xldIuau/T2SAzCk1:wrLgO0023ZQK9CO+U1xldqu/T2SA
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-