General
- Target 8461f06fe801cb105f1b53dc66ffa8c8
- Size 138KB
- Sample240131-pcx7fsbgd2
- SHA256 14d236def5720b3839dafe5e88626a2e9766fa0aa5d8798c0e8584f3d186ccdb
- MD5 8461f06fe801cb105f1b53dc66ffa8c8
- SHA1 a68991f9efefc78fe9f0c9131cb02ce19a7f4ce1
- SHA512 ae65e15df5e5fdb96c4c9e05ef186b14248ad97a0c4b3a18b24687ef306c137c7f553a4196dc89f6e1f6a933c29fb8c76893d7be35222ad3e485ac3d31d7c730
- SSDEEP 3072:IzmRupY+T3q7n1EJP7d3ebUL8T/fiWgqNXNAY3FhXLJ62TqXMdvfYay:I2UY+m71ExdMU3Wg2bJ62X5y
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
8461f06fe801cb105f1b53dc66ffa8c8.exe
Resource
win7-20231215-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
8461f06fe801cb105f1b53dc66ffa8c8.exe
Resource
win10v2004-20231222-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 8461f06fe801cb105f1b53dc66ffa8c8
- Size 138KB
- SHA256 14d236def5720b3839dafe5e88626a2e9766fa0aa5d8798c0e8584f3d186ccdb
- MD5 8461f06fe801cb105f1b53dc66ffa8c8
- SHA1 a68991f9efefc78fe9f0c9131cb02ce19a7f4ce1
- SHA512 ae65e15df5e5fdb96c4c9e05ef186b14248ad97a0c4b3a18b24687ef306c137c7f553a4196dc89f6e1f6a933c29fb8c76893d7be35222ad3e485ac3d31d7c730
- SSDEEP 3072:IzmRupY+T3q7n1EJP7d3ebUL8T/fiWgqNXNAY3FhXLJ62TqXMdvfYay:I2UY+m71ExdMU3Wg2bJ62X5y
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Suspicious use of SetThreadContext