General

  • Target

    Deposits.exe

  • Size

    2.3MB

  • Sample

    231203-ty8yasch73

  • MD5

    840c2d19371c8777ad60bd43216850b7

  • SHA1

    f8c1bea9462564236389eaabd21aec2c6f99e86c

  • SHA256

    30dd85d625d40167cb0fe5a7935a15a8c167c8bdf8a621690f8c3807db43b781

  • SHA512

    c1f3e49b071383d0a54a61a72caae5b4c05a23d6426bc83939012f77b848768e13557cab7f48eac7ccc6df26d259b6fb091025c314d407f52387fee4e6e6ef06

  • SSDEEP

    49152:UkQzWGa8pH8yc0/wU2lpe63ZrxKrVEbRIqiPt419Fehg1mQ5C:UNqGa8pcyV/wjpdZrxEVEtI14pqn

Malware Config

Targets

    • Target

      Deposits.exe

    • Size

      2.3MB

    • MD5

      840c2d19371c8777ad60bd43216850b7

    • SHA1

      f8c1bea9462564236389eaabd21aec2c6f99e86c

    • SHA256

      30dd85d625d40167cb0fe5a7935a15a8c167c8bdf8a621690f8c3807db43b781

    • SHA512

      c1f3e49b071383d0a54a61a72caae5b4c05a23d6426bc83939012f77b848768e13557cab7f48eac7ccc6df26d259b6fb091025c314d407f52387fee4e6e6ef06

    • SSDEEP

      49152:UkQzWGa8pH8yc0/wU2lpe63ZrxKrVEbRIqiPt419Fehg1mQ5C:UNqGa8pcyV/wjpdZrxEVEtI14pqn

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks