General

  • Target

    8bb46a3a69cdc2db96b9ae723d2fd8b4

  • Size

    613KB

  • Sample

    240203-hv9jwabfh2

  • MD5

    8bb46a3a69cdc2db96b9ae723d2fd8b4

  • SHA1

    c26f4788e563600519687eeb8a659942a0a2722f

  • SHA256

    79b4480dc4ff572e853e3f0766a675f69ff6cfb86fd193a87146149c8159c6cc

  • SHA512

    827de038c2f175af1147badb35757049c395efd99445b90fed4602df1e2d28746445198bbd95cf6fc0aab120164ef8a26f50dbbde9fcc06dac407eb27f3257ef

  • SSDEEP

    12288:HnbfsmhHjlRehRpDad1NTt9aAdNkp6ihsqMb6VtYnNE3dIzrXHHpS9Mfjs8pz:HnTssDlo3p4VzFdU6i+qe6wNE3dIzLHZ

Score
10/10

Malware Config

Targets

    • Target

      8bb46a3a69cdc2db96b9ae723d2fd8b4

    • Size

      613KB

    • MD5

      8bb46a3a69cdc2db96b9ae723d2fd8b4

    • SHA1

      c26f4788e563600519687eeb8a659942a0a2722f

    • SHA256

      79b4480dc4ff572e853e3f0766a675f69ff6cfb86fd193a87146149c8159c6cc

    • SHA512

      827de038c2f175af1147badb35757049c395efd99445b90fed4602df1e2d28746445198bbd95cf6fc0aab120164ef8a26f50dbbde9fcc06dac407eb27f3257ef

    • SSDEEP

      12288:HnbfsmhHjlRehRpDad1NTt9aAdNkp6ihsqMb6VtYnNE3dIzrXHHpS9Mfjs8pz:HnTssDlo3p4VzFdU6i+qe6wNE3dIzLHZ

    Score
    10/10
    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks