General
-
Target
003786546788765.PDF.exe
-
Size
1.8MB
-
Sample
231126-kgz5dsfh39
-
MD5
dd985ad6ff3a38972aa87834407f9e62
-
SHA1
980e4e4f22d48c0e336bbf9b5fca0e7320461720
-
SHA256
2159cbace070eda555164924c4bf646924d95a7dcbc3cf7ab44d2c918d0abe0b
-
SHA512
83f0695bce3f75431d8509d8770934adcc09a76ae46f01b03882657e333264d188fb4b25bca9aeb3da67437e3c3513044a841ee564eadd997ca9085ca4fb64a6
-
SSDEEP
49152:bee0SeGwcSGQuOvlzgzRlyYFT9xZdmPSw:blMGNQuywXFJQ
Static task
static1
Behavioral task
behavioral1
Sample
003786546788765.PDF.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
003786546788765.PDF.exe
Resource
win10v2004-20231025-en
Malware Config
Targets
-
-
Target
003786546788765.PDF.exe
-
Size
1.8MB
-
MD5
dd985ad6ff3a38972aa87834407f9e62
-
SHA1
980e4e4f22d48c0e336bbf9b5fca0e7320461720
-
SHA256
2159cbace070eda555164924c4bf646924d95a7dcbc3cf7ab44d2c918d0abe0b
-
SHA512
83f0695bce3f75431d8509d8770934adcc09a76ae46f01b03882657e333264d188fb4b25bca9aeb3da67437e3c3513044a841ee564eadd997ca9085ca4fb64a6
-
SSDEEP
49152:bee0SeGwcSGQuOvlzgzRlyYFT9xZdmPSw:blMGNQuywXFJQ
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Adds Run key to start application
-