General

  • Target

    053e97f0ed534fba271ac5668c59349a

  • Size

    2.4MB

  • Sample

    231229-13ctzsece8

  • MD5

    053e97f0ed534fba271ac5668c59349a

  • SHA1

    428ea0ac3fb84f0e228fa5b376def140d7a129b0

  • SHA256

    18cd3a43021cb1d5da42dbfa3acde80f5a967e84031cac76fc7a4f8bf1617288

  • SHA512

    2f11664bd0ae299cf7fe3b32543c6564b38413086a4906e14aecda754c636b0ad896cc685c26730d0655bccc78875e0d45c270175d61fe59e3629e48c5448da5

  • SSDEEP

    49152:Zz57C7Km1N8QRxPnN+A/OrZqhnCZayEIT/2c4LlMA63dVN:55O7/D8CxPnN+N1/EIT/vcs3d

Malware Config

Targets

    • Target

      053e97f0ed534fba271ac5668c59349a

    • Size

      2.4MB

    • MD5

      053e97f0ed534fba271ac5668c59349a

    • SHA1

      428ea0ac3fb84f0e228fa5b376def140d7a129b0

    • SHA256

      18cd3a43021cb1d5da42dbfa3acde80f5a967e84031cac76fc7a4f8bf1617288

    • SHA512

      2f11664bd0ae299cf7fe3b32543c6564b38413086a4906e14aecda754c636b0ad896cc685c26730d0655bccc78875e0d45c270175d61fe59e3629e48c5448da5

    • SSDEEP

      49152:Zz57C7Km1N8QRxPnN+A/OrZqhnCZayEIT/2c4LlMA63dVN:55O7/D8CxPnN+N1/EIT/vcs3d

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks