General

  • Target

    b5a06286b15c6a7297e796f2e1ded41c

  • Size

    157KB

  • MD5

    b5a06286b15c6a7297e796f2e1ded41c

  • SHA1

    db46daf551cfdc835e0970c343c2e8d24de5a78b

  • SHA256

    d0b9bbad39939b7011bec8cfd1136ce7d4d43a60aa637e1a8bf54a481e26e982

  • SHA512

    a15efbc675c9d50008d05e587dd5a23e5620e0f4c7fc77dd0977755d30e48c40ce74d2c060c080d1f47df1beda3d2fd4dd6601efdac490ce081bcda0f77256ca

  • SSDEEP

    3072:wL1pXzJuwr6ae4dtybxdSQZla2ttdbLAs4JbjEhS6mx7LM6e4f5:wx3q/wtybxAQZlaA70jEh6+6f

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b5a06286b15c6a7297e796f2e1ded41c
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections