General

  • Target

    Payment Details.exe

  • Size

    1.5MB

  • Sample

    240906-q3jmeszfnf

  • MD5

    8829ac95079c711f9f7ecde3f8a47e65

  • SHA1

    c0c601ca0d59d4776b0bf22bf1a3cce319011747

  • SHA256

    a6097c984268c1d8031f5530890323c4007796d8d3edf386676e9322f0a71173

  • SHA512

    390bfc3b8f85a0c0f14fd608deff2c314f3814de1829cbbc3910bdf97a37bef199a94ae8af9a12eb1220d44dc423cae4ef34ffd6f6ecca12ede092401d8234b9

  • SSDEEP

    24576:RWGddPN4jN35Ohf8aT7JYR/MNPjWXY1Q7/VJJzsaz:RLLW15OOIYR/wjWXY1QZNz

Malware Config

Targets

    • Target

      Payment Details.exe

    • Size

      1.5MB

    • MD5

      8829ac95079c711f9f7ecde3f8a47e65

    • SHA1

      c0c601ca0d59d4776b0bf22bf1a3cce319011747

    • SHA256

      a6097c984268c1d8031f5530890323c4007796d8d3edf386676e9322f0a71173

    • SHA512

      390bfc3b8f85a0c0f14fd608deff2c314f3814de1829cbbc3910bdf97a37bef199a94ae8af9a12eb1220d44dc423cae4ef34ffd6f6ecca12ede092401d8234b9

    • SSDEEP

      24576:RWGddPN4jN35Ohf8aT7JYR/MNPjWXY1Q7/VJJzsaz:RLLW15OOIYR/wjWXY1QZNz

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

MITRE ATT&CK Enterprise v15

Tasks