General

  • Target

    2053a6dd354c6ddcc8fef830b92015a6

  • Size

    133KB

  • Sample

    231230-3ny5sagfe9

  • MD5

    2053a6dd354c6ddcc8fef830b92015a6

  • SHA1

    1e07ac59d4bc2062f9f9dd7b6d259046e0baaf21

  • SHA256

    340e15ab89a240b558910ea31031d09010d904d9fea5792d228f33a57a5c2848

  • SHA512

    6bcb1eba116c9f034d674c7e3515d1a9fdc7fda89e82c4843b5abc1331f56d09a19f392a6e7f231aab864cfc3d6c7e4c58f665c002764b9ad935fbd8fc2612d1

  • SSDEEP

    3072:xk21bWvnGE5pbQ+47MBmfQF0h6waFOITOaoTqu:vunzVzBmfAwaFjXot

Malware Config

Targets

    • Target

      2053a6dd354c6ddcc8fef830b92015a6

    • Size

      133KB

    • MD5

      2053a6dd354c6ddcc8fef830b92015a6

    • SHA1

      1e07ac59d4bc2062f9f9dd7b6d259046e0baaf21

    • SHA256

      340e15ab89a240b558910ea31031d09010d904d9fea5792d228f33a57a5c2848

    • SHA512

      6bcb1eba116c9f034d674c7e3515d1a9fdc7fda89e82c4843b5abc1331f56d09a19f392a6e7f231aab864cfc3d6c7e4c58f665c002764b9ad935fbd8fc2612d1

    • SSDEEP

      3072:xk21bWvnGE5pbQ+47MBmfQF0h6waFOITOaoTqu:vunzVzBmfAwaFjXot

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks whether UAC is enabled

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks