General

  • Target

    0ceab7e105d0a554716bd4cf98ed97cd

  • Size

    131KB

  • Sample

    231230-dzhvhabhcj

  • MD5

    0ceab7e105d0a554716bd4cf98ed97cd

  • SHA1

    c2d7189d1c2bea1a652d442d556a032de9d6bc73

  • SHA256

    45196da24df8582560c84088e81b3eecbfb19f8da2fcd7cd75aed2d8851aeeba

  • SHA512

    befbfabba7526837b42fcf3ffb2718eeaeb2a37e1fe30b30aa0f6b5c19d89baac942b0512d880b44ff85303e063bb320e982791a93f6e7508f7f78bcc71f28a2

  • SSDEEP

    3072:SuyrHX1EedcfeO4iwQCxkhBzEpdVWNL/Ggi98FlDM9c:SuyrHX1XdpOTW3VWFGgMeDMe

Malware Config

Targets

    • Target

      0ceab7e105d0a554716bd4cf98ed97cd

    • Size

      131KB

    • MD5

      0ceab7e105d0a554716bd4cf98ed97cd

    • SHA1

      c2d7189d1c2bea1a652d442d556a032de9d6bc73

    • SHA256

      45196da24df8582560c84088e81b3eecbfb19f8da2fcd7cd75aed2d8851aeeba

    • SHA512

      befbfabba7526837b42fcf3ffb2718eeaeb2a37e1fe30b30aa0f6b5c19d89baac942b0512d880b44ff85303e063bb320e982791a93f6e7508f7f78bcc71f28a2

    • SSDEEP

      3072:SuyrHX1EedcfeO4iwQCxkhBzEpdVWNL/Ggi98FlDM9c:SuyrHX1XdpOTW3VWFGgMeDMe

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • UAC bypass

    • ModiLoader Second Stage

    • Loads dropped DLL

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v15

Tasks