General

  • Target

    cdd1dfd53128a9d9deb66034d398439b29303e2be2a1eabb1d93d222ae0a84eb

  • Size

    1009KB

  • Sample

    241121-wds3fsymfr

  • MD5

    84b9e38b88cdb6a51c2ed11e4ae6ce08

  • SHA1

    83111430e609c42c8f1ed871290301b5b77d90de

  • SHA256

    cdd1dfd53128a9d9deb66034d398439b29303e2be2a1eabb1d93d222ae0a84eb

  • SHA512

    9535699af139df57a54fa362c67c3113f7b7d1c2fc52b7fb2efcfb6cfa7be16b85f5b87d66de8134ab49985f1d6e4c35074331fe83745f1e9e50095e358d1e1c

  • SSDEEP

    24576:HccTfHWId4iO+0SvkMFIDT8Jf3pbV13Jks:H3VHFI8t5X

Malware Config

Targets

    • Target

      cdd1dfd53128a9d9deb66034d398439b29303e2be2a1eabb1d93d222ae0a84eb

    • Size

      1009KB

    • MD5

      84b9e38b88cdb6a51c2ed11e4ae6ce08

    • SHA1

      83111430e609c42c8f1ed871290301b5b77d90de

    • SHA256

      cdd1dfd53128a9d9deb66034d398439b29303e2be2a1eabb1d93d222ae0a84eb

    • SHA512

      9535699af139df57a54fa362c67c3113f7b7d1c2fc52b7fb2efcfb6cfa7be16b85f5b87d66de8134ab49985f1d6e4c35074331fe83745f1e9e50095e358d1e1c

    • SSDEEP

      24576:HccTfHWId4iO+0SvkMFIDT8Jf3pbV13Jks:H3VHFI8t5X

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks