General

  • Target

    PI and payment confirmed Pdf.exe

  • Size

    1.1MB

  • Sample

    240906-q2dpsazfjb

  • MD5

    e24c61b241080efaac5d32bce8719483

  • SHA1

    14d47504fd9622e90fc4bb657f057f016ada91b4

  • SHA256

    4494b0f1eb0a6e2da871e8cb4d37818b0ca0c47a98960374783304d83a94445e

  • SHA512

    d96ea4a4b92de830662dba0e7701c4dcc66c3bfb3cf5a364640471db450aa2c21cfbd23713e559e332075662442d2f3279c4a4852db91452f4a769886ae1339a

  • SSDEEP

    24576:BcIIRLydDI+bzTkUUT7d6AMskY/m2AIvO4+UVBAlUz:BBHbfOd6ApqI/4

Malware Config

Targets

    • Target

      PI and payment confirmed Pdf.exe

    • Size

      1.1MB

    • MD5

      e24c61b241080efaac5d32bce8719483

    • SHA1

      14d47504fd9622e90fc4bb657f057f016ada91b4

    • SHA256

      4494b0f1eb0a6e2da871e8cb4d37818b0ca0c47a98960374783304d83a94445e

    • SHA512

      d96ea4a4b92de830662dba0e7701c4dcc66c3bfb3cf5a364640471db450aa2c21cfbd23713e559e332075662442d2f3279c4a4852db91452f4a769886ae1339a

    • SSDEEP

      24576:BcIIRLydDI+bzTkUUT7d6AMskY/m2AIvO4+UVBAlUz:BBHbfOd6ApqI/4

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

MITRE ATT&CK Enterprise v15

Tasks