General
-
Target
2ee0cef5a06ce20d0f511178d2b588ba1117ba45406df788a06a940c83f3f0d3.exe
-
Size
1.3MB
-
Sample
240524-mwj3tsec2z
-
MD5
c2cf4912b15897bbc710cf0fefe1c135
-
SHA1
6dabbb0bd4622068452f148253f6dafd309a15f7
-
SHA256
2ee0cef5a06ce20d0f511178d2b588ba1117ba45406df788a06a940c83f3f0d3
-
SHA512
caa62e4252b1aa26ba9946e29d12d48eb938fc904f432d11bcfb991a8ebd22b37e8d94ef9600849f732bd4f996e68fc9473b4cdc6c945920c51e9f6c1a01c99c
-
SSDEEP
24576:AP+g7Wy3xfMZKdcKtTjbJ44EEEEEEEEEEEEEEEEEEEETKKKKKKKKKKKKKKKKKKK7:A/iy3g6TjbrEEEEEEEEEEEEEEEEEEEE+
Static task
static1
Behavioral task
behavioral1
Sample
2ee0cef5a06ce20d0f511178d2b588ba1117ba45406df788a06a940c83f3f0d3.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2ee0cef5a06ce20d0f511178d2b588ba1117ba45406df788a06a940c83f3f0d3.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2ee0cef5a06ce20d0f511178d2b588ba1117ba45406df788a06a940c83f3f0d3.exe
-
Size
1.3MB
-
MD5
c2cf4912b15897bbc710cf0fefe1c135
-
SHA1
6dabbb0bd4622068452f148253f6dafd309a15f7
-
SHA256
2ee0cef5a06ce20d0f511178d2b588ba1117ba45406df788a06a940c83f3f0d3
-
SHA512
caa62e4252b1aa26ba9946e29d12d48eb938fc904f432d11bcfb991a8ebd22b37e8d94ef9600849f732bd4f996e68fc9473b4cdc6c945920c51e9f6c1a01c99c
-
SSDEEP
24576:AP+g7Wy3xfMZKdcKtTjbJ44EEEEEEEEEEEEEEEEEEEETKKKKKKKKKKKKKKKKKKK7:A/iy3g6TjbrEEEEEEEEEEEEEEEEEEEE+
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Executes dropped EXE
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-