General

  • Target

    c2bce4627a55d5e31dbfddb5be8d12c64016e6eeb82874d398bb8a3275aeeec9.exe

  • Size

    1.3MB

  • Sample

    241112-prswaasfrp

  • MD5

    34d5d0387db968806776c394bee6a50f

  • SHA1

    1e100286262eb54210691b09fc467e88214ae7c3

  • SHA256

    c2bce4627a55d5e31dbfddb5be8d12c64016e6eeb82874d398bb8a3275aeeec9

  • SHA512

    a96d0e607282201fd1ced18d541bdc5d75ccd2b2db8f509ff8d9bdf6eac60a0e81a57687029ed8c886d5d235f91afac2a49541f487651beab07372a21d1244d7

  • SSDEEP

    24576:Z2UQlS3rdEooqXXrKZWET6smDKGMYULltywNhRxA:8MheZSsmDKxdLltykBA

Malware Config

Targets

    • Target

      c2bce4627a55d5e31dbfddb5be8d12c64016e6eeb82874d398bb8a3275aeeec9.exe

    • Size

      1.3MB

    • MD5

      34d5d0387db968806776c394bee6a50f

    • SHA1

      1e100286262eb54210691b09fc467e88214ae7c3

    • SHA256

      c2bce4627a55d5e31dbfddb5be8d12c64016e6eeb82874d398bb8a3275aeeec9

    • SHA512

      a96d0e607282201fd1ced18d541bdc5d75ccd2b2db8f509ff8d9bdf6eac60a0e81a57687029ed8c886d5d235f91afac2a49541f487651beab07372a21d1244d7

    • SSDEEP

      24576:Z2UQlS3rdEooqXXrKZWET6smDKGMYULltywNhRxA:8MheZSsmDKxdLltykBA

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks