General

  • Target

    48ffbabe49f00a49b2b4f54c10bf9c4dc943e6e34d3df6517e5f7a0dccecc101

  • Size

    4.3MB

  • MD5

    d050b95b33d1f8bac292efe5400486b7

  • SHA1

    1f87224ce06c3192544ac6bcb1c207fe1486f32a

  • SHA256

    48ffbabe49f00a49b2b4f54c10bf9c4dc943e6e34d3df6517e5f7a0dccecc101

  • SHA512

    8712250ae913d87888dd74f1c7f9359dd89263b43436862518596058ee912a23a2f382f8a62db51725eb2fee39060dd4d93306c09371771b9da339910d099526

  • SSDEEP

    98304:EJUfRiJ8NJ0L085/xZ4re8amikf9OW2kVfZVy2J:cUazJZ4rexmDf9ObAZQ2J

Score
10/10

Malware Config

Signatures

  • ModiLoader First Stage 1 IoCs
  • Modiloader family
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 48ffbabe49f00a49b2b4f54c10bf9c4dc943e6e34d3df6517e5f7a0dccecc101
    .zip
  • phpxedit_33/setup.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • phpxedit_33/詟/phpxedit.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • phpxedit_33/詟/.txt
  • phpxedit_33/.txt