General

  • Target

    2024-05-17_629cd54df9f8bf34cfe38e25e3684832_kovter

  • Size

    1.3MB

  • MD5

    629cd54df9f8bf34cfe38e25e3684832

  • SHA1

    70239fdebbad99e4c6e1f9b6ed0dcd8aaece4c8d

  • SHA256

    ee06b2bb2c09e0480ae74bac6888b544f6d1c497c11383efa8769b7627b92334

  • SHA512

    3833fc1a377aecb9014650d4ad4475ba7d6b0eb89d4385aadb5bbca0adfab67810c00d25670aa9ecbef0b16287ccc9ca2cf9c2c2bc7e2cd9036b3ed72d9fcd98

  • SSDEEP

    6144:kq4/ZdjqF1Tov7yuTlb5251VnH0y+Brlka3q4/ZdjqF1Tov7yuTlb5251VnHgv+N:xIre+bQ5jnalAIre+bQ5jnNl

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-17_629cd54df9f8bf34cfe38e25e3684832_kovter
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections