General

  • Target

    1e4a72e8f12c57701f983192d44a9dc5

  • Size

    930KB

  • MD5

    1e4a72e8f12c57701f983192d44a9dc5

  • SHA1

    6735ab7f0036cba565914bb62b9ecfb2a2fc8dd0

  • SHA256

    d1bc857c865377f2cc97eaafcc444e22d84ca621a33556ee5651ecb327df4a02

  • SHA512

    c785bab3b5242e1682ef09422bcb0925ee40bfef25f01905f25389a8f9ef31b919eb6e2f30b728bbe9ddb2150ce3f4cb994957e00263c451433b07f58ab60c46

  • SSDEEP

    24576:CVzQ7Rc558NR1h6ZW+vAE4MIwl+1M8oBpamUN:C1Yc558Nl6eE4ycMtraFN

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • 1e4a72e8f12c57701f983192d44a9dc5
    .zip
  • BearShareS.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • CDBurnS.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • EmuleS.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ISPNOTE.txt
  • Kriptomatik.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • LimewireS.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ShareazaS.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • UsbS.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections