General
- Target Dwtkbuwxlttdpq.exe
- Size 2.3MB
- Sample231203-ty9jtsch74
- SHA256 7d75d4b4861ce4669ee9245e8ee7c141eb9b9f56fb6fdcabf9a295ff36498a47
- MD5 f900583508c284059608aceb44dc26b3
- SHA1 f25e4f7f4d6e79a368f7dcbf02f6ae9f7df012b1
- SHA512 b64f3e7ccc217c2173344e705688c553e2283ad40fbcb943e873e6ecd9a7fc637dba3eb645a316c4156941c8db6935fd1d9f40ad21490cdeb5a85ae725568fe5
- SSDEEP 49152:UkQzWGa8pH8yc0/wU2lpe63ZrxKrVEbRIqiPt41tFehg1mQ5C:UNqGa8pcyV/wjpdZrxEVEtI14Vqn
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Dwtkbuwxlttdpq.exe
Resource
win7-20231129-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Dwtkbuwxlttdpq.exe
Resource
win10v2004-20231130-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target Dwtkbuwxlttdpq.exe
- Size 2.3MB
- SHA256 7d75d4b4861ce4669ee9245e8ee7c141eb9b9f56fb6fdcabf9a295ff36498a47
- MD5 f900583508c284059608aceb44dc26b3
- SHA1 f25e4f7f4d6e79a368f7dcbf02f6ae9f7df012b1
- SHA512 b64f3e7ccc217c2173344e705688c553e2283ad40fbcb943e873e6ecd9a7fc637dba3eb645a316c4156941c8db6935fd1d9f40ad21490cdeb5a85ae725568fe5
- SSDEEP 49152:UkQzWGa8pH8yc0/wU2lpe63ZrxKrVEbRIqiPt41tFehg1mQ5C:UNqGa8pcyV/wjpdZrxEVEtI14Vqn
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage