General
-
Target
a311c064a48b99a8a79e047656e610e95234c57830be981c08b8164bb3b18d24.exe
-
Size
1.4MB
-
Sample
240524-bznpmsge3s
-
MD5
0b7e50b40135c3919e58a39b9a224353
-
SHA1
3e2bfa0bec42f913d52b4df5c58dac2d10a80922
-
SHA256
a311c064a48b99a8a79e047656e610e95234c57830be981c08b8164bb3b18d24
-
SHA512
3aa4e32dce04bcc5d36fecbe722064cee6c4211806414438d34f1a9fb29862dbe022b2890efb64f490a636b5fb38dc17a65192ae29a4830633bfd69ed182708a
-
SSDEEP
24576:yn25nPkW3amy8sQxeWcktTjbJ49auDyEEEEEEEEEEEEEEEEEEEETKKKKKKKKKKKr:yn2kGy7wTjbI/DyEEEEEEEEEEEEEEEEm
Static task
static1
Behavioral task
behavioral1
Sample
a311c064a48b99a8a79e047656e610e95234c57830be981c08b8164bb3b18d24.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a311c064a48b99a8a79e047656e610e95234c57830be981c08b8164bb3b18d24.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
a311c064a48b99a8a79e047656e610e95234c57830be981c08b8164bb3b18d24.exe
-
Size
1.4MB
-
MD5
0b7e50b40135c3919e58a39b9a224353
-
SHA1
3e2bfa0bec42f913d52b4df5c58dac2d10a80922
-
SHA256
a311c064a48b99a8a79e047656e610e95234c57830be981c08b8164bb3b18d24
-
SHA512
3aa4e32dce04bcc5d36fecbe722064cee6c4211806414438d34f1a9fb29862dbe022b2890efb64f490a636b5fb38dc17a65192ae29a4830633bfd69ed182708a
-
SSDEEP
24576:yn25nPkW3amy8sQxeWcktTjbJ49auDyEEEEEEEEEEEEEEEEEEEETKKKKKKKKKKKr:yn2kGy7wTjbI/DyEEEEEEEEEEEEEEEEm
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
Detect packed .NET executables. Mostly AgentTeslaV4.
-
ModiLoader Second Stage
-
Executes dropped EXE
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-