General

  • Target

    A1igazolsNEAK.cmd

  • Size

    3.2MB

  • Sample

    241127-nh3hpa1pdv

  • MD5

    762418dec48856ba0d49502a74501855

  • SHA1

    737821b86467236583bc84296a990ca674272e36

  • SHA256

    eb79bf74ea55ae61ba0129e6f17c3cb1f7ca2b06aea4715a75033c6cdd49ee3a

  • SHA512

    beea9a859591a28b7a560400134781015bf89d641845cb54937fa8eea8e13ce51668bdd9b14c5e11c99e48d8f2a76e3362df3bedca632fed738b8c57518d36fa

  • SSDEEP

    24576:4qFgiqkItvoQQ2C4OSQne5I0EKU8lbiZGU/+RCNJXCP+cQKKJan7HQpIGsAmCqxD:4ygOIldCnZe5I4bj3aqHGsAjqpT

Malware Config

Targets

    • Target

      A1igazolsNEAK.cmd

    • Size

      3.2MB

    • MD5

      762418dec48856ba0d49502a74501855

    • SHA1

      737821b86467236583bc84296a990ca674272e36

    • SHA256

      eb79bf74ea55ae61ba0129e6f17c3cb1f7ca2b06aea4715a75033c6cdd49ee3a

    • SHA512

      beea9a859591a28b7a560400134781015bf89d641845cb54937fa8eea8e13ce51668bdd9b14c5e11c99e48d8f2a76e3362df3bedca632fed738b8c57518d36fa

    • SSDEEP

      24576:4qFgiqkItvoQQ2C4OSQne5I0EKU8lbiZGU/+RCNJXCP+cQKKJan7HQpIGsAmCqxD:4ygOIldCnZe5I4bj3aqHGsAjqpT

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks