General
-
Target
URGENTE_NOTIFICATION.Tar
-
Size
4.3MB
-
Sample
240426-twvynafe45
-
MD5
b7564a9b1aac20457e2d1a33a6b412bc
-
SHA1
9f3059dd7f3c598194827b15b769bbf685ccaa07
-
SHA256
ace733fd929688fb9cba1a8ecfb05db47c214694a9a993650bd022ab869a9c8a
-
SHA512
4e97416424aa4508d2da7797259d3dc17d7442af41b52f571e92682d75b163aa30a5511631e89164bb705dae1f57e03710b0fe3a6bb17586b5b3ceaa7a033521
-
SSDEEP
49152:TEi0F7JFavH5JDy0oqMaKcCln2UE+ESPTcexrEPdOgSlxHgamuc6slJ:x
Static task
static1
Behavioral task
behavioral1
Sample
URGENTE_NOTIFICATION.cmd
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
URGENTE_NOTIFICATION.cmd
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
URGENTE_NOTIFICATION.cmd
-
Size
4.3MB
-
MD5
10dfd3dccfeaeb1e19e586e5d89ef1c6
-
SHA1
af3aa6b4249a27778de9e8b2fc2ee6badb0e299a
-
SHA256
f81c9ad169f7dcfa4545eab3552115156d7923957c1cffc4809a574209599e3c
-
SHA512
f8b3d6cc712792f1fa567ecf730809c4b49241e6b5fb31961bf8643a2b7a0af3635672cee0d2ac8e02312c1727ec3c01abb7e35ce49a831865d6a16b66b5ce7e
-
SSDEEP
49152:EEi0F7JFavH5JDy0oqMaKcCln2UE+ESPTcexrEPdOgSlxHgamuc6slj:e
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Executes dropped EXE
-
Loads dropped DLL
-
Legitimate hosting services abused for malware hosting/C2
-