Behavioral task
behavioral1
Sample
2023-04-11_562d109085281da47d395b7d3ebba7cf_kovter.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
2023-04-11_562d109085281da47d395b7d3ebba7cf_kovter.exe
Resource
win10v2004-20230221-en
General
-
Target
2023-04-11_562d109085281da47d395b7d3ebba7cf_kovter
-
Size
1.1MB
-
MD5
562d109085281da47d395b7d3ebba7cf
-
SHA1
14b3e2b7cc38f0f57e44830d5802933fe2a91748
-
SHA256
420e2808406ea0d4ac6704ff29c197f7bd31399db9dbad7d8fa1297376b8fbc2
-
SHA512
2450e4e51c4d79e398cab15c7939a27b7f9ce277ffafd24ab74680c2293e81cd727594f5ae79f1afb0cf7903cbd1455bc13a224b6dce5478fab4e56c51017551
-
SSDEEP
12288:VeSYm5+6+RdDcRiifEBGrrvPu47xC4PTdFP+3h/H6U7Tr:Ve5m50RFcRiOQGrDPuIxCiTPP+3paU/r
Malware Config
Signatures
-
ModiLoader Second Stage 1 IoCs
Processes:
resource yara_rule sample modiloader_stage2 -
Modiloader family
Files
-
2023-04-11_562d109085281da47d395b7d3ebba7cf_kovter.exe windows x64
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ