General

  • Target

    7473e5356f5e3928b3f32e5c6d81089343b308eed5201900bb7425e6772b95f2

  • Size

    692KB

  • Sample

    240915-mp2z3azgkn

  • MD5

    c17e15da98bf8610020908928cdbde25

  • SHA1

    25c670b040e681dd1ef2eba10b36589ef4b45947

  • SHA256

    7473e5356f5e3928b3f32e5c6d81089343b308eed5201900bb7425e6772b95f2

  • SHA512

    e270c51670c63e035ec7352a15e554eff9afdf95374079a1d79dfb615517e39ae3e77410aaa079a555993984575606d1f72ac27a7a207667fa2cb9e7ad02bfb7

  • SSDEEP

    12288:+tzSoEDsJ/kvRID/xtimRzOINFrGTcmQXJWsTxT/HCk:ymmJ/k5Kx0cOICwbWuxTPX

Malware Config

Targets

    • Target

      7473e5356f5e3928b3f32e5c6d81089343b308eed5201900bb7425e6772b95f2

    • Size

      692KB

    • MD5

      c17e15da98bf8610020908928cdbde25

    • SHA1

      25c670b040e681dd1ef2eba10b36589ef4b45947

    • SHA256

      7473e5356f5e3928b3f32e5c6d81089343b308eed5201900bb7425e6772b95f2

    • SHA512

      e270c51670c63e035ec7352a15e554eff9afdf95374079a1d79dfb615517e39ae3e77410aaa079a555993984575606d1f72ac27a7a207667fa2cb9e7ad02bfb7

    • SSDEEP

      12288:+tzSoEDsJ/kvRID/xtimRzOINFrGTcmQXJWsTxT/HCk:ymmJ/k5Kx0cOICwbWuxTPX

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks