General

  • Target

    140f2b392b76f408cf22e34f24e03784bf06113c85c483d67e317d8bda795e2c.exe.zip

  • Size

    3.3MB

  • MD5

    439675edeed0bb790ea2f2ae00261a77

  • SHA1

    6885e0e4fcba2f80666efc24c16ba481bea3c279

  • SHA256

    c7b86b1c0eaf82e93bb67fdf6c98124fe0810a0c0bede0c38548a3b9643932d9

  • SHA512

    4cc740f697df3ff7d9bfb6d9f9a4f6d8f9d25a33cf127369d51236901053db3ccbc717efd19b6b25a162ff88dd6c53d9f29002635a22b43f2d869b5827ace251

  • SSDEEP

    98304:jEws9amplNJQ+VkF4h3vA92fLhbaLweNv0lFP5bpF3F+/Ew:orVlNJ9nh3vA929bc30HxP1+7

Score
10/10

Malware Config

Signatures

  • ModiLoader First Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 140f2b392b76f408cf22e34f24e03784bf06113c85c483d67e317d8bda795e2c.exe.zip
    .zip

    Password: infected

  • 140f2b392b76f408cf22e34f24e03784bf06113c85c483d67e317d8bda795e2c.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections