General

  • Target

    d4449a3f8d728c2a1b324035925bfcf706cc5aacc5e16aca2816c9fcd1f16849

  • Size

    2.9MB

  • Sample

    240917-n9zwwasaka

  • MD5

    e0bf919ec54d4c3d14e384969cc230b0

  • SHA1

    b38b411cc76948baa0234c1f670dbf876e1d5e51

  • SHA256

    d4449a3f8d728c2a1b324035925bfcf706cc5aacc5e16aca2816c9fcd1f16849

  • SHA512

    4a6eb259f146e4d006b54649c561aae80b5fe30c4b9fe0d0d3e2d00ef6233c948c94c1a10fa38a08d32c3faf9f08175e5e9c8a8dc58d50438b8817ff47ac7fe4

  • SSDEEP

    49152:NDU+fe9YRGjsNwd9isQ6bYYE7ORL4HrOVPisXIa77TO7cBX3FymLrzp6vcP69fhy:Ng+feuvwDiN6bYYE7iLKyJiaIaXuct35

Malware Config

Targets

    • Target

      d4449a3f8d728c2a1b324035925bfcf706cc5aacc5e16aca2816c9fcd1f16849

    • Size

      2.9MB

    • MD5

      e0bf919ec54d4c3d14e384969cc230b0

    • SHA1

      b38b411cc76948baa0234c1f670dbf876e1d5e51

    • SHA256

      d4449a3f8d728c2a1b324035925bfcf706cc5aacc5e16aca2816c9fcd1f16849

    • SHA512

      4a6eb259f146e4d006b54649c561aae80b5fe30c4b9fe0d0d3e2d00ef6233c948c94c1a10fa38a08d32c3faf9f08175e5e9c8a8dc58d50438b8817ff47ac7fe4

    • SSDEEP

      49152:NDU+fe9YRGjsNwd9isQ6bYYE7ORL4HrOVPisXIa77TO7cBX3FymLrzp6vcP69fhy:Ng+feuvwDiN6bYYE7iLKyJiaIaXuct35

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader First Stage

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks