General

  • Target

    c455b4916243c10b078043ea03fb2195

  • Size

    1.1MB

  • MD5

    c455b4916243c10b078043ea03fb2195

  • SHA1

    99fff27c6bbf1252b19ebc1b8872553d9f023175

  • SHA256

    909863c9062056e2ea71036eb3648ab1b4056b2117c6709aaaa7b8221c227779

  • SHA512

    f6082e610c10d68f512b32202bacd1b451d793097f8cffdf0a4359ee4c50a04d310cd9da0935eea727144b214000a33879adfe5331924c3d292ea68642c75d20

  • SSDEEP

    24576:dSHDLfPgB3/sLBwCRjSUKRLwq5h531WOvufvnG38w:dSgBELBiUK2q5hR1tMns8w

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c455b4916243c10b078043ea03fb2195
    .rar
  • hjy80/hjy/Operate.ini
  • hjy80/hjy/SERVER.dat
  • hjy80/hjy/db1.mdb
  • hjy80/hjy/功能介绍.txt
  • hjy80/hjy/海洋软件网址.url
    .url
  • hjy80/hjy/监控8.0.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections