General

  • Target

    8461f06fe801cb105f1b53dc66ffa8c8

  • Size

    138KB

  • Sample

    240131-pcx7fsbgd2

  • MD5

    8461f06fe801cb105f1b53dc66ffa8c8

  • SHA1

    a68991f9efefc78fe9f0c9131cb02ce19a7f4ce1

  • SHA256

    14d236def5720b3839dafe5e88626a2e9766fa0aa5d8798c0e8584f3d186ccdb

  • SHA512

    ae65e15df5e5fdb96c4c9e05ef186b14248ad97a0c4b3a18b24687ef306c137c7f553a4196dc89f6e1f6a933c29fb8c76893d7be35222ad3e485ac3d31d7c730

  • SSDEEP

    3072:IzmRupY+T3q7n1EJP7d3ebUL8T/fiWgqNXNAY3FhXLJ62TqXMdvfYay:I2UY+m71ExdMU3Wg2bJ62X5y

Score
10/10

Malware Config

Targets

    • Target

      8461f06fe801cb105f1b53dc66ffa8c8

    • Size

      138KB

    • MD5

      8461f06fe801cb105f1b53dc66ffa8c8

    • SHA1

      a68991f9efefc78fe9f0c9131cb02ce19a7f4ce1

    • SHA256

      14d236def5720b3839dafe5e88626a2e9766fa0aa5d8798c0e8584f3d186ccdb

    • SHA512

      ae65e15df5e5fdb96c4c9e05ef186b14248ad97a0c4b3a18b24687ef306c137c7f553a4196dc89f6e1f6a933c29fb8c76893d7be35222ad3e485ac3d31d7c730

    • SSDEEP

      3072:IzmRupY+T3q7n1EJP7d3ebUL8T/fiWgqNXNAY3FhXLJ62TqXMdvfYay:I2UY+m71ExdMU3Wg2bJ62X5y

    Score
    10/10
    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks