General

  • Target

    4faf8ce1bcf5e4936e2e9c4666fbd276

  • Size

    152KB

  • MD5

    4faf8ce1bcf5e4936e2e9c4666fbd276

  • SHA1

    19bc445db9b3847395d83c0986084b2d0d24ed32

  • SHA256

    7ff8bc00c3fd5f76e67ac41ec42bb2f62b00691e54d6aec918d118d549e72ace

  • SHA512

    429e8cf6f48404516f079f427917d15fb1aea236778f9aa508dbc503b39051c4c0a09259e40a40e73a6b14cd4d36f1be92ea09f5e6e89263e3e12557f4066295

  • SSDEEP

    3072:YCinnqo3hdgk9R0Gax+NmTb06BzNrCbCWWV87sj88r98F:YlqoPg7+mTQQrCbuj4F

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4faf8ce1bcf5e4936e2e9c4666fbd276
    .rar
  • malwarebyte.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections