Overview

overview

10

Static

static

10

140f2b392b...2c.exe

windows7-x64

10

140f2b392b...2c.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    140f2b392b76f408cf22e34f24e03784bf06113c85c483d67e317d8bda795e2c.exe.zip

  • Size

    3.3MB

  • MD5

    da5c25f0faa276de5ea320933157a0da

  • SHA1

    b8b6a8979e06a46af6e10e4bd0de382e8ef94f41

  • SHA256

    73211683ebc2a20236039f6d85117b92c193fe33c4306b5e2f1dba9d4c2d47a9

  • SHA512

    15ab00c998f1ba05ee219d40c590b71cc5298f1df48a9fbccbbcfa3c6ca052c7547824ee9735ec71cb0276fc78082973c136137e1118f8e1729ace9a094ee31c

  • SSDEEP

    98304:H5XftBhCbbxhWHdXQMF/xs8U5+8hNsqFVs15dfuquE1X/roPiDg:HtFoxhWyMp3U5+8hNbFVs3dfuhYXkac

Score
10/10
upxmodiloader

Malware Config

Signatures

  • ModiLoader First Stage 1 IoCs
  • Modiloader family
    modiloader
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 140f2b392b76f408cf22e34f24e03784bf06113c85c483d67e317d8bda795e2c.exe.zip
    .zip

    Password: infected

  • 140f2b392b76f408cf22e34f24e03784bf06113c85c483d67e317d8bda795e2c.exe
    .exe windows:4 windows x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86


    Headers

    Sections