General

  • Target

    PO#5_tower_Dec162022.html

  • Size

    1.2MB

  • Sample

    241216-lxdrrsvpgt

  • MD5

    b2641a4ba8ebb6014d67d8e9a78acce7

  • SHA1

    396b9b7b85e6c61917eed60d774f183bf071775e

  • SHA256

    e2fdd71bb2b39a38ff9556cb57d0086f40224a76857540c98aaab76dd59021c2

  • SHA512

    d80ca65a9e15d2ddc22aa25879e345e5061b906d481bccf6333dbb56e37200c034568cc0bf609a1676b73f3ff404ecaa44bf444606dc496ca9ae9634135d0ad2

  • SSDEEP

    12288:sW7OJjd8FCSHkCJQwBgeeMXU3563tNw26HSg2BNjHyn5bAzJ1bErWdqDrVk7W/WS:+dDC6w0MEM3t2WnDylDuZ+kinyvLZc

Malware Config

Targets

    • Target

      PO#5_tower_Dec162022.html

    • Size

      1.2MB

    • MD5

      b2641a4ba8ebb6014d67d8e9a78acce7

    • SHA1

      396b9b7b85e6c61917eed60d774f183bf071775e

    • SHA256

      e2fdd71bb2b39a38ff9556cb57d0086f40224a76857540c98aaab76dd59021c2

    • SHA512

      d80ca65a9e15d2ddc22aa25879e345e5061b906d481bccf6333dbb56e37200c034568cc0bf609a1676b73f3ff404ecaa44bf444606dc496ca9ae9634135d0ad2

    • SSDEEP

      12288:sW7OJjd8FCSHkCJQwBgeeMXU3563tNw26HSg2BNjHyn5bAzJ1bErWdqDrVk7W/WS:+dDC6w0MEM3t2WnDylDuZ+kinyvLZc

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks