General
- Target BL-DOCS.exe
- Size 1.4MB
- Sample231111-jcykbsde39
- SHA256 9dbe21429d77afca07940928b39d0e7c9d994ea9d10a651ccd5189d4522be1cf
- MD5 e06bad3a1add436525a06fa827322e11
- SHA1 6f26bbf7fd78e1898ec52256c517aae89daf047e
- SHA512 ef76a3a27f9ca5960504ab0a834dbdfc05d405df33899b18b2bbe4f51fc82e2c726fefb7bc18d9442a553f7361cef3dd7928464a43488f5e5ae1f51ad26ccf0f
- SSDEEP 24576:a1gIhzVfFATn5p6hEj9mdvc/R/hntYbVwypYhSJt4ouciFaa/A:a1hVCOdcTntYZwyueGoQ4
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
BL-DOCS.exe
Resource
win7-20231020-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
BL-DOCS.exe
Resource
win10v2004-20231023-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target BL-DOCS.exe
- Size 1.4MB
- SHA256 9dbe21429d77afca07940928b39d0e7c9d994ea9d10a651ccd5189d4522be1cf
- MD5 e06bad3a1add436525a06fa827322e11
- SHA1 6f26bbf7fd78e1898ec52256c517aae89daf047e
- SHA512 ef76a3a27f9ca5960504ab0a834dbdfc05d405df33899b18b2bbe4f51fc82e2c726fefb7bc18d9442a553f7361cef3dd7928464a43488f5e5ae1f51ad26ccf0f
- SSDEEP 24576:a1gIhzVfFATn5p6hEj9mdvc/R/hntYbVwypYhSJt4ouciFaa/A:a1hVCOdcTntYZwyueGoQ4
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage