General
-
Target
Maksajuma kopija.exe
-
Size
1.0MB
-
Sample
231211-h6hkjahfe3
-
MD5
70843993af64eb6cacf91e79b85c66d6
-
SHA1
d0ab71f54485ab258e0303d33b11dabee1851134
-
SHA256
b27a99adeed5a49bd7a19f6e894da217dd005d9b709c85e5fa49f55f3932b853
-
SHA512
2b9d9c0a25636073dd8fd912bb617e573b3bb82f86c9627a69e05322230fb0a0d1ecf2e91344600bf69c1b89670a8a4e46a297b65f9bc956c63fcc1b089b2048
-
SSDEEP
24576:0it4uJtHL/PkgSAq5dRHBez6oONXEef2sS5OYYi:0iWiH7P85fsz6oM2mY/
Static task
static1
Behavioral task
behavioral1
Sample
Maksajuma kopija.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
Maksajuma kopija.exe
Resource
win10v2004-20231127-en
Malware Config
Targets
-
-
Target
Maksajuma kopija.exe
-
Size
1.0MB
-
MD5
70843993af64eb6cacf91e79b85c66d6
-
SHA1
d0ab71f54485ab258e0303d33b11dabee1851134
-
SHA256
b27a99adeed5a49bd7a19f6e894da217dd005d9b709c85e5fa49f55f3932b853
-
SHA512
2b9d9c0a25636073dd8fd912bb617e573b3bb82f86c9627a69e05322230fb0a0d1ecf2e91344600bf69c1b89670a8a4e46a297b65f9bc956c63fcc1b089b2048
-
SSDEEP
24576:0it4uJtHL/PkgSAq5dRHBez6oONXEef2sS5OYYi:0iWiH7P85fsz6oM2mY/
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-