General

  • Target

    da7ba6743ff18a14522d68cc59c0f01d5fd6f7d1886541bf4016e62487f146a1

  • Size

    112KB

  • Sample

    241104-f51cvavdkb

  • MD5

    8730099121a477763cdb5fb5107f878e

  • SHA1

    67b95a1b80f54b4b324f199e7555ea935ad68459

  • SHA256

    da7ba6743ff18a14522d68cc59c0f01d5fd6f7d1886541bf4016e62487f146a1

  • SHA512

    25086e43ae6c519662b628201671d4703f7102f338f020c94906a66fd168e52b41f3c8c253c53d9c54ddf5a8ee17cccb998821478ef5ef8c939656a97847bce4

  • SSDEEP

    1536:taFSpzohUHIhKGdZvR0InLdV2MJbQT8jJHQjFedghKIYxViuLfI6LVWyZ+Uj:cFS8zv3xkMJbQTcwRL8IQV9TL8yAUj

Malware Config

Targets

    • Target

      da7ba6743ff18a14522d68cc59c0f01d5fd6f7d1886541bf4016e62487f146a1

    • Size

      112KB

    • MD5

      8730099121a477763cdb5fb5107f878e

    • SHA1

      67b95a1b80f54b4b324f199e7555ea935ad68459

    • SHA256

      da7ba6743ff18a14522d68cc59c0f01d5fd6f7d1886541bf4016e62487f146a1

    • SHA512

      25086e43ae6c519662b628201671d4703f7102f338f020c94906a66fd168e52b41f3c8c253c53d9c54ddf5a8ee17cccb998821478ef5ef8c939656a97847bce4

    • SSDEEP

      1536:taFSpzohUHIhKGdZvR0InLdV2MJbQT8jJHQjFedghKIYxViuLfI6LVWyZ+Uj:cFS8zv3xkMJbQTcwRL8IQV9TL8yAUj

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks