Overview

overview

10

Static

static

1

Árajánla...cx.zip

windows10-ltsc 2021-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    QuarantineMessage.zip

  • Size

    861KB

  • Sample

    241114-ksbaeawgnq

  • MD5

    61bbe3ed680dab004ec682da3fda4858

  • SHA1

    15c472a0c93296fcf4c8b041d007e73c41696c87

  • SHA256

    f41ed0244caeafc5c363850e1bff87ecdd30e450b7874004db1029980abd2cf2

  • SHA512

    2e3de05c305476d8986a18234d85aabaef88f03455cccc5bc2c9ab3bfa94290de77f4241ba36b3c1cc874cad5c703c5341b347d8279a82badb10002d289029a1

  • SSDEEP

    12288:R0DhA4Ooe+XWMxoCcgHC5eGi1yFphyFDClM51k4K8RnInPLO+D2i8d2GEcPPEmAt:RO/oCc1eGaEpQFDCOsDSDEc37UDCHJxG

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      Árajánlat kérés MOL093478524·docx.zip

    • Size

      465KB

    • MD5

      95b1d5878c0c7feea5d74bd1fcddad3c

    • SHA1

      0ed8547f32c3415934a6706db52a052ce1c4914e

    • SHA256

      b0ac744c193760a9c936698638472dc9b6dac7c97c4d9bd3dc4d422b67dbd68a

    • SHA512

      d769f183ebb84e72a31e424484a4c25c11ec9b69b39ea8ed8527a0e02c488c35f2ad80e43a877a4aad901f137f517008a393240688d0e5e9ba8ec074c18c233e

    • SSDEEP

      12288:oNiFPVJPd60VzXeuanhk4lI2wb8E3Fscm8/9W:osFdZ5VTeHhpBar2YW

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modiloader family

      modiloader

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks