General
-
Target
a9ab6ae9fb0198840b9309d04dfeff8cdacd81a4edcc6bc7c32879608ae765b3
-
Size
1.5MB
-
Sample
240621-bjp8jaycnq
-
MD5
026413bbfef5671928ad071ec2abb31a
-
SHA1
65d9c92d986961ea05431a937f75a193a09de3b0
-
SHA256
a9ab6ae9fb0198840b9309d04dfeff8cdacd81a4edcc6bc7c32879608ae765b3
-
SHA512
d93cf780d1ad11519e21293254f779fc9fbc14f8fbdd4a86854ed00ce8d39c3bf4c08e7a1da887aeae350c5d3c0a02b9b4e39efd34dbf962ea2d61e3871107c3
-
SSDEEP
24576:Gb8mxc3aLtwdDxaSQnr9yceV8FCsKbX3bEyh5lMV/M6x:GRdiRgyrlMV/M6
Static task
static1
Behavioral task
behavioral1
Sample
a9ab6ae9fb0198840b9309d04dfeff8cdacd81a4edcc6bc7c32879608ae765b3.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
a9ab6ae9fb0198840b9309d04dfeff8cdacd81a4edcc6bc7c32879608ae765b3.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
a9ab6ae9fb0198840b9309d04dfeff8cdacd81a4edcc6bc7c32879608ae765b3
-
Size
1.5MB
-
MD5
026413bbfef5671928ad071ec2abb31a
-
SHA1
65d9c92d986961ea05431a937f75a193a09de3b0
-
SHA256
a9ab6ae9fb0198840b9309d04dfeff8cdacd81a4edcc6bc7c32879608ae765b3
-
SHA512
d93cf780d1ad11519e21293254f779fc9fbc14f8fbdd4a86854ed00ce8d39c3bf4c08e7a1da887aeae350c5d3c0a02b9b4e39efd34dbf962ea2d61e3871107c3
-
SSDEEP
24576:Gb8mxc3aLtwdDxaSQnr9yceV8FCsKbX3bEyh5lMV/M6x:GRdiRgyrlMV/M6
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Legitimate hosting services abused for malware hosting/C2
-
Suspicious use of SetThreadContext
-