General

  • Target

    75836ecc3f94d6ba550f8c8c13301e3c59c52a468a79efae6edebe4f1308ae3cN

  • Size

    265KB

  • Sample

    240918-me98pavhmb

  • MD5

    e3a2512f819f37dcad5b10fe43429450

  • SHA1

    93fb5debb25d0b75e4152380430bdcc0747b2474

  • SHA256

    75836ecc3f94d6ba550f8c8c13301e3c59c52a468a79efae6edebe4f1308ae3c

  • SHA512

    0c80b7249568297b552acc5b7eefe3adc904497dd066ee4ac01632e0ccd3d5ff9115a27a12439022d9dd8b2d94a25ef6e5f0f3f2e7b4c560a5180963f20cef73

  • SSDEEP

    6144:YyB01uCflxSB8Fvhqao9PpJwfk2sNI/YSzq3zM88s73m:S1JfFMjJazi3z12

Malware Config

Targets

    • Target

      75836ecc3f94d6ba550f8c8c13301e3c59c52a468a79efae6edebe4f1308ae3cN

    • Size

      265KB

    • MD5

      e3a2512f819f37dcad5b10fe43429450

    • SHA1

      93fb5debb25d0b75e4152380430bdcc0747b2474

    • SHA256

      75836ecc3f94d6ba550f8c8c13301e3c59c52a468a79efae6edebe4f1308ae3c

    • SHA512

      0c80b7249568297b552acc5b7eefe3adc904497dd066ee4ac01632e0ccd3d5ff9115a27a12439022d9dd8b2d94a25ef6e5f0f3f2e7b4c560a5180963f20cef73

    • SSDEEP

      6144:YyB01uCflxSB8Fvhqao9PpJwfk2sNI/YSzq3zM88s73m:S1JfFMjJazi3z12

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks