General

  • Target

    7bd1539577453e56e51686e46e8957f73a52b9fb7f8f7ab67f82ccc8b1919e6c.exe.zip

  • Size

    3.3MB

  • MD5

    b9f8756f8b0bc92315c3ea87d0bf1930

  • SHA1

    8053c98b23944fc139ffb8e264d3c11d350430f8

  • SHA256

    d402149ec765ce679d9ac38bb600124fe56247e5d9edf310455d4ba4fc1f6a10

  • SHA512

    86d7079bf2d37d755881c001a4dd6a1f8f16dcb3943c725a4caf7eebc2e6ef690dee8ce72ed3dd6297a300095261865a3585fe97785c1a605a769aa805395b7b

  • SSDEEP

    98304:TtEZQQhfvOlDCNL8daNyAClcv9NcqpohSSQGY:3QhHNNL8cNyACCzcqpoh4GY

Score
10/10

Malware Config

Signatures

  • ModiLoader First Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 7bd1539577453e56e51686e46e8957f73a52b9fb7f8f7ab67f82ccc8b1919e6c.exe.zip
    .zip

    Password: infected

  • 7bd1539577453e56e51686e46e8957f73a52b9fb7f8f7ab67f82ccc8b1919e6c.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections