General

  • Target

    d5f7f4f631faca212ee9ea21f9f4eba5c3c3b9a0e14f6f870bea1bebd711c313N.exe

  • Size

    300KB

  • Sample

    241207-eg7ata1jgp

  • MD5

    8806b1a3148867fbd12bd2841f353360

  • SHA1

    e8b7730248faba5c7957738ba6725ed7db102ddf

  • SHA256

    d5f7f4f631faca212ee9ea21f9f4eba5c3c3b9a0e14f6f870bea1bebd711c313

  • SHA512

    3535c05223cc0296b20c0da6c80cd7e0c851b141b7396dddcaf325f5fcddde3434704e6d79e38f68b52fe732e7e5b1e89004badbf45f24f5454bd3f1837fffe8

  • SSDEEP

    3072:Ue2A0wxDqUpM5scww4chO+O1BmP5DG0sg3i4XZ9WvDZHwdRX/L+gP38Ge:UsxD5cwohO+O1sVG0/pZ6iPC8o

Malware Config

Targets

    • Target

      d5f7f4f631faca212ee9ea21f9f4eba5c3c3b9a0e14f6f870bea1bebd711c313N.exe

    • Size

      300KB

    • MD5

      8806b1a3148867fbd12bd2841f353360

    • SHA1

      e8b7730248faba5c7957738ba6725ed7db102ddf

    • SHA256

      d5f7f4f631faca212ee9ea21f9f4eba5c3c3b9a0e14f6f870bea1bebd711c313

    • SHA512

      3535c05223cc0296b20c0da6c80cd7e0c851b141b7396dddcaf325f5fcddde3434704e6d79e38f68b52fe732e7e5b1e89004badbf45f24f5454bd3f1837fffe8

    • SSDEEP

      3072:Ue2A0wxDqUpM5scww4chO+O1BmP5DG0sg3i4XZ9WvDZHwdRX/L+gP38Ge:UsxD5cwohO+O1sVG0/pZ6iPC8o

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.