General
-
Target
13200136294.zip
-
Size
1.9MB
-
Sample
231128-mefn3shb83
-
MD5
c8e68453d3f940d0d4c4476347f78107
-
SHA1
6ed21705188ccb144dc31d7b34c7f8c22cd87e28
-
SHA256
d9b676378a6964f24f19f30a74453ad53853fe4079ca983f55be50dff3723652
-
SHA512
9e7de03a23acfd9e2b74fe05160cfe09342849823b346f1dda665cd3a99fbd34aa879a6ef79b9221f253073dd2fb33ac032e28ae52d162219975ce6253c1f17f
-
SSDEEP
49152:UVu/cVGgcdjeee0IXspavvPzggLP0kZxj6iZ3IXJco0v:I+MG/djeepIcpavEs0EV6A3IXJb0v
Static task
static1
Behavioral task
behavioral1
Sample
7ffd894e16efa08b856ea6023135fc537562d9e7424205bed57a54e754643577.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
7ffd894e16efa08b856ea6023135fc537562d9e7424205bed57a54e754643577.exe
Resource
win10v2004-20231127-en
Malware Config
Targets
-
-
Target
7ffd894e16efa08b856ea6023135fc537562d9e7424205bed57a54e754643577
-
Size
2.8MB
-
MD5
c571feca7dd9afeb0076b38e5f5df4c5
-
SHA1
3501d69b6462f6f0702c3af0a5d4cb6e41af0c5c
-
SHA256
7ffd894e16efa08b856ea6023135fc537562d9e7424205bed57a54e754643577
-
SHA512
4a06b25559e186ef776b6f75850a52422509df4b94c2ecd314d4adb76ce68d68970808ba337d77759819be06e99e6fb996d8767161da0ef05c7613e06a20dae7
-
SSDEEP
49152:Xm/PpH8yc0/wU2lpe63ZrxKrVEbRIqiPt41TFehg1mQzZ:XOpcyV/wjpdZrxEVEtI14TqnY
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-