General

  • Target

    90876654545.exe

  • Size

    1.3MB

  • Sample

    241111-mvh45s1qhn

  • MD5

    8b6f94521ac60e64b40e778e718122a9

  • SHA1

    b90228c873bd96943d8db718a2421c7e9a32e66a

  • SHA256

    61d0d8866e74f349b6eb2d4c3c5fb221614aa7c99aa4607cd86830f14845d2ab

  • SHA512

    3ad6be629504c89030285572bc9803d44b435fe2332cbf74098e215c2b953e98f353f218c80c27792378bc7fb88fb3638df892ae1f43edd81141bf929bddf09f

  • SSDEEP

    24576:Z2UQlS3rdEooqXXrKZWET6smDKGMYULltywNhRx:8MheZSsmDKxdLltykB

Malware Config

Targets

    • Target

      90876654545.exe

    • Size

      1.3MB

    • MD5

      8b6f94521ac60e64b40e778e718122a9

    • SHA1

      b90228c873bd96943d8db718a2421c7e9a32e66a

    • SHA256

      61d0d8866e74f349b6eb2d4c3c5fb221614aa7c99aa4607cd86830f14845d2ab

    • SHA512

      3ad6be629504c89030285572bc9803d44b435fe2332cbf74098e215c2b953e98f353f218c80c27792378bc7fb88fb3638df892ae1f43edd81141bf929bddf09f

    • SSDEEP

      24576:Z2UQlS3rdEooqXXrKZWET6smDKGMYULltywNhRx:8MheZSsmDKxdLltykB

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks