General
-
Target
69d49e2e9cb21bebe0b8dfb1d6bb24eaac9a350590cae75b4705d5f9e9ec8c34.exe.zip
-
Size
4.0MB
-
Sample
231201-spywascd36
-
MD5
687efe1533bcc03d7336f5c005d46ed4
-
SHA1
6070b395b735fb987d27e5415c8168d0eefbd23b
-
SHA256
c3b6b919a0bb74a042da9fe83dbe24886922ac73aeb454ffd7f75c7f01e36511
-
SHA512
a970b67074645dee777d1c874e8f53bf85e5dd95397a8da77c210351789ef7ca59566cf1e37b74a619f144ab19c5d6386532e26602728d4ef07b863adce42c6b
-
SSDEEP
98304:DWQql3WwzG9lJJucn+nzSMa2dKWqcIRfS:DNqdWw4JJQSidh/v
Behavioral task
behavioral1
Sample
69d49e2e9cb21bebe0b8dfb1d6bb24eaac9a350590cae75b4705d5f9e9ec8c34.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
69d49e2e9cb21bebe0b8dfb1d6bb24eaac9a350590cae75b4705d5f9e9ec8c34.exe
Resource
win10v2004-20231127-en
Malware Config
Targets
-
-
Target
69d49e2e9cb21bebe0b8dfb1d6bb24eaac9a350590cae75b4705d5f9e9ec8c34.exe
-
Size
4.1MB
-
MD5
eb96525068c763142b2316a01e8f3ca6
-
SHA1
81310c8616f80d8d3510d597c2173344bfc1c18d
-
SHA256
69d49e2e9cb21bebe0b8dfb1d6bb24eaac9a350590cae75b4705d5f9e9ec8c34
-
SHA512
e167642c76f50c300d3b4616995662f093a9758c7dd1c7a886b6d43e90d9e06ff7fce5cdea3d7284f3dd2dec58113bb2bec6e2a03c99f4770990559187d9af58
-
SSDEEP
98304:7HT+hqkR6opYY5M5VbNPVnSj6+1g/2PsNJuF53NMZid7:7H6IkR6K9q/Sj6+KUzMQ
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader First Stage
-