General
-
Target
PO#5_tower_Dec162022.html
-
Size
1.2MB
-
Sample
241216-lxdrrsvpgt
-
MD5
b2641a4ba8ebb6014d67d8e9a78acce7
-
SHA1
396b9b7b85e6c61917eed60d774f183bf071775e
-
SHA256
e2fdd71bb2b39a38ff9556cb57d0086f40224a76857540c98aaab76dd59021c2
-
SHA512
d80ca65a9e15d2ddc22aa25879e345e5061b906d481bccf6333dbb56e37200c034568cc0bf609a1676b73f3ff404ecaa44bf444606dc496ca9ae9634135d0ad2
-
SSDEEP
12288:sW7OJjd8FCSHkCJQwBgeeMXU3563tNw26HSg2BNjHyn5bAzJ1bErWdqDrVk7W/WS:+dDC6w0MEM3t2WnDylDuZ+kinyvLZc
Static task
static1
Behavioral task
behavioral1
Sample
PO#5_tower_Dec162022.html
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
PO#5_tower_Dec162022.html
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
PO#5_tower_Dec162022.html
-
Size
1.2MB
-
MD5
b2641a4ba8ebb6014d67d8e9a78acce7
-
SHA1
396b9b7b85e6c61917eed60d774f183bf071775e
-
SHA256
e2fdd71bb2b39a38ff9556cb57d0086f40224a76857540c98aaab76dd59021c2
-
SHA512
d80ca65a9e15d2ddc22aa25879e345e5061b906d481bccf6333dbb56e37200c034568cc0bf609a1676b73f3ff404ecaa44bf444606dc496ca9ae9634135d0ad2
-
SSDEEP
12288:sW7OJjd8FCSHkCJQwBgeeMXU3563tNw26HSg2BNjHyn5bAzJ1bErWdqDrVk7W/WS:+dDC6w0MEM3t2WnDylDuZ+kinyvLZc
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
Modiloader family
-
ModiLoader Second Stage
-
Executes dropped EXE
-