General

  • Target

    Assessment from SARS.exe

  • Size

    1.1MB

  • Sample

    240906-q2dpsazfjc

  • MD5

    59ad7d4b71b42f2abc299c17d04ea5ad

  • SHA1

    35d7bc92fe3ba800f0d7c1e6b9b71830ed7a9798

  • SHA256

    1ef76a2d8261360325fb2881c01e8cb3c1ac8cd4616cddf762e14e89e0a88d7f

  • SHA512

    b82bfac97dcaf04379221d3bba0a2d8bbed06107f953a6552b8e30935ce2cdd212d5ffc610fcbdc2c7a1607222f6971de56c3a673b9ce651900d350778148792

  • SSDEEP

    24576:BcIIRLydDI+bzTkUUTLd6AMskY/m2AIvO4+UVBAlUz:BBHbfyd6ApqI/4

Malware Config

Targets

    • Target

      Assessment from SARS.exe

    • Size

      1.1MB

    • MD5

      59ad7d4b71b42f2abc299c17d04ea5ad

    • SHA1

      35d7bc92fe3ba800f0d7c1e6b9b71830ed7a9798

    • SHA256

      1ef76a2d8261360325fb2881c01e8cb3c1ac8cd4616cddf762e14e89e0a88d7f

    • SHA512

      b82bfac97dcaf04379221d3bba0a2d8bbed06107f953a6552b8e30935ce2cdd212d5ffc610fcbdc2c7a1607222f6971de56c3a673b9ce651900d350778148792

    • SSDEEP

      24576:BcIIRLydDI+bzTkUUTLd6AMskY/m2AIvO4+UVBAlUz:BBHbfyd6ApqI/4

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

MITRE ATT&CK Enterprise v15

Tasks