General
-
Target
Yeni siparis, fatura.exe
-
Size
1.1MB
-
Sample
231204-lcf2dsac42
-
MD5
5b377a4350546a601c6081db521e5e68
-
SHA1
2cb6fc67a20989020ef48dcff1bab236c76caf28
-
SHA256
e94c8165947e2adda5ffead77a571b43deaa0300f018ea5ba46a7e2567f79e31
-
SHA512
dbde43b4c8f09c6a06e0586f347dfe26aaa7d4b6b25f4fed61dde2d9022cfeebcd5899ee2cd1545df60f06a495be4305313d30600a9279c9026dbf4be689cdf8
-
SSDEEP
12288:RtVsGMuG7PS2wDtCU6NdObmCvRJqKqMQZLGdVNXbUWsK9h9wAPft4:R0hOSNENpJqKOGvdUWVJt
Static task
static1
Behavioral task
behavioral1
Sample
Yeni siparis, fatura.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
Yeni siparis, fatura.exe
Resource
win10v2004-20231130-en
Malware Config
Targets
-
-
Target
Yeni siparis, fatura.exe
-
Size
1.1MB
-
MD5
5b377a4350546a601c6081db521e5e68
-
SHA1
2cb6fc67a20989020ef48dcff1bab236c76caf28
-
SHA256
e94c8165947e2adda5ffead77a571b43deaa0300f018ea5ba46a7e2567f79e31
-
SHA512
dbde43b4c8f09c6a06e0586f347dfe26aaa7d4b6b25f4fed61dde2d9022cfeebcd5899ee2cd1545df60f06a495be4305313d30600a9279c9026dbf4be689cdf8
-
SSDEEP
12288:RtVsGMuG7PS2wDtCU6NdObmCvRJqKqMQZLGdVNXbUWsK9h9wAPft4:R0hOSNENpJqKOGvdUWVJt
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-