General

  • Target

    Server-.bin.zip

  • Size

    128KB

  • MD5

    3327d556fe62103dadd2e47a7a7e1ec0

  • SHA1

    59b69c5d5124c267feb98970d18611f1e0c8d1c5

  • SHA256

    438596621e281d55185f8e8326adf85e28f2dca29d65f78196e98b8b755d8ec0

  • SHA512

    c01c7ea507e80c61346d534933975f0d057944b8d27b33969aafb861eef7c451d9bd16676b7f46edda7b4de64587a9f9134f6ef2d800beed3031e01d2fdd2805

  • SSDEEP

    3072:b6RpNWHuOoyghgJHhcWJFjafYmSZBem9jjDatgWAZla:b64H7oyg+n9FjawmIMmotFOU

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Server-.bin.zip
    .zip

    Password: infected

  • Server-.bin.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections