General
-
Target
NewX.exe
-
Size
18KB
-
Sample
240616-jww6lswaqd
-
MD5
04e8a7b1a3a658cb5d8041542195075a
-
SHA1
22bf6e551c2c0279d2d0bc41a68f378c71b2d8f0
-
SHA256
0288572315915db261182f65784eb05ffdc4edb9774c88f68b085362dfad19b3
-
SHA512
4082e953b0dc9be718283c0cb295bb218d1df5f15712f7a488f426f8b8e24ee1a2b67b30d80e52eba3bc5116b04589113c655ee92f4da73039dec325cbe13d0f
-
SSDEEP
384:jEw7wknHOYXQdhLGPvCaV4pLS7OGQ8xy1CzcNlqAne:jEw7wkHOYEGPvCaV4pLzb1fNl
Behavioral task
behavioral1
Sample
NewX.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
NewX.exe
-
Size
18KB
-
MD5
04e8a7b1a3a658cb5d8041542195075a
-
SHA1
22bf6e551c2c0279d2d0bc41a68f378c71b2d8f0
-
SHA256
0288572315915db261182f65784eb05ffdc4edb9774c88f68b085362dfad19b3
-
SHA512
4082e953b0dc9be718283c0cb295bb218d1df5f15712f7a488f426f8b8e24ee1a2b67b30d80e52eba3bc5116b04589113c655ee92f4da73039dec325cbe13d0f
-
SSDEEP
384:jEw7wknHOYXQdhLGPvCaV4pLS7OGQ8xy1CzcNlqAne:jEw7wkHOYEGPvCaV4pLzb1fNl
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-