General

  • Target

    Terminal.exe

  • Size

    336KB

  • Sample

    231204-q3j8ysbe96

  • MD5

    cd5c916784dd580bdbc61e5610c96f03

  • SHA1

    fd28e061c12cbe3e0dd3337b2987acc7c975be9a

  • SHA256

    c76b17b182979d5e0c1d3c9838346a8f21b4b94b2fb1eb03e3fdb50ae35a3253

  • SHA512

    712e769539a1c658c9d90ba93f95fa6d3c934b66194c6d7849657053d5304d1e6dbf3f9e9e65bda5397475f936e6b5054ee3dfa452e7dc92a4e6f0a7832b523a

  • SSDEEP

    6144:rwjHRk3/wI4OharpFvEV7UPU1dxbwhxprbkFClc7142LgiqCPoz:iHRySOQ9FvEV7U8hbwhbrQhBxPq

Score
10/10

Malware Config

Targets

    • Target

      Terminal.exe

    • Size

      336KB

    • MD5

      cd5c916784dd580bdbc61e5610c96f03

    • SHA1

      fd28e061c12cbe3e0dd3337b2987acc7c975be9a

    • SHA256

      c76b17b182979d5e0c1d3c9838346a8f21b4b94b2fb1eb03e3fdb50ae35a3253

    • SHA512

      712e769539a1c658c9d90ba93f95fa6d3c934b66194c6d7849657053d5304d1e6dbf3f9e9e65bda5397475f936e6b5054ee3dfa452e7dc92a4e6f0a7832b523a

    • SSDEEP

      6144:rwjHRk3/wI4OharpFvEV7UPU1dxbwhxprbkFClc7142LgiqCPoz:iHRySOQ9FvEV7U8hbwhbrQhBxPq

    Score
    10/10
    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader First Stage

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks