General

  • Target

    7bd1539577453e56e51686e46e8957f73a52b9fb7f8f7ab67f82ccc8b1919e6c.exe.zip

  • Size

    3.3MB

  • MD5

    0440f8f266084f228255be540826a3fb

  • SHA1

    9eb8e24d48100ac11df43d27e98ed590d179e404

  • SHA256

    5766d8f06f6fd63072beba02b24e900b5d02a9bdd92718ea3aef1f8f6256c78a

  • SHA512

    9f36584a1ec2ea633b29c08d75391c56b24d3c7322a9b4988e5dc6ecf23cf415f5b1333b230a8e321d0e08dd568b6a9860cfb504fc174fb28c778c4ed31dc3a6

  • SSDEEP

    98304:BH2aW2UxHSaIAZ7785SFt4uRt8NXgUbub:I12U1IA17X3P85jub

Score
10/10

Malware Config

Signatures

  • ModiLoader First Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 7bd1539577453e56e51686e46e8957f73a52b9fb7f8f7ab67f82ccc8b1919e6c.exe.zip
    .zip

    Password: infected

  • 7bd1539577453e56e51686e46e8957f73a52b9fb7f8f7ab67f82ccc8b1919e6c.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections