General

  • Target

    5d8cf8c65a74cc0ca554dfa198bc2ed7c93a0542832d494d2a4a63190485e083.zip

  • Size

    168KB

  • MD5

    126281ee74b22e6b1879642c5986633d

  • SHA1

    cd68730d33e875d33b682cdb6e60f35dcea7798a

  • SHA256

    5bf97ed8940a913380bd3a97725cd6a6b057bd8e85aff2fdf974e09ea9298fa7

  • SHA512

    c4128dd1b2728aceb271fca940fba51dd23b2343743a1ff8e6d3ebc7eb8980a62483685a82a228a6ad22f47ad1ae38b08fe986601d63de9ccc35aff1a05ee2bd

  • SSDEEP

    3072:wLP5BiJcaCllp9f1Z9TA/5z4f/XVdOM/zfr5QKZxexYUcyziIfOatj:wLhBcdCjpJ1XTaqfNJLr5QKZHyzikOap

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5d8cf8c65a74cc0ca554dfa198bc2ed7c93a0542832d494d2a4a63190485e083.zip
    .zip

    Password: infected

  • 5d8cf8c65a74cc0ca554dfa198bc2ed7c93a0542832d494d2a4a63190485e083.exe
    .exe windows x86

    Password: infected


    Headers

    Sections