General

  • Target

    PROCUREMENT ADVICE AND ORDER.exe

  • Size

    1.3MB

  • Sample

    241219-hn8zrstrcr

  • MD5

    885b30bae5152a5857afed3ee0a20486

  • SHA1

    d888950686cf246a5e29a8db79014a0d8680f056

  • SHA256

    980ca560bfecf5e6e629612390fb3210a9767c64574ef1afd18fc5f310634d29

  • SHA512

    9dac731d64d7f61653ad02c6a9e18b6ad88a04117e5e92964498a85d9ebba7adde933953fb0b35dc16b4abc2d07947242f26f658f0bafcfa38ec45d78f094878

  • SSDEEP

    24576:TS1gzTBokW3THfYl7JTOs1r7FX2DOfqDrKfK8r/4mSwhOSqR:TtTiq973f

Malware Config

Targets

    • Target

      PROCUREMENT ADVICE AND ORDER.exe

    • Size

      1.3MB

    • MD5

      885b30bae5152a5857afed3ee0a20486

    • SHA1

      d888950686cf246a5e29a8db79014a0d8680f056

    • SHA256

      980ca560bfecf5e6e629612390fb3210a9767c64574ef1afd18fc5f310634d29

    • SHA512

      9dac731d64d7f61653ad02c6a9e18b6ad88a04117e5e92964498a85d9ebba7adde933953fb0b35dc16b4abc2d07947242f26f658f0bafcfa38ec45d78f094878

    • SSDEEP

      24576:TS1gzTBokW3THfYl7JTOs1r7FX2DOfqDrKfK8r/4mSwhOSqR:TtTiq973f

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

MITRE ATT&CK Enterprise v15

Tasks