General

  • Target

    PO_2024_056209_MQ04865_ENQ_1045 (1).GZ

  • Size

    943KB

  • Sample

    241231-dmqpkstrfw

  • MD5

    6271861abdb95e51f6849c843acdae62

  • SHA1

    66cc315ad98bd5bae2ffb11729bbfdae8eefa85a

  • SHA256

    aae8699a908c3ca5211006647460cb8eb15c517a7cbf4a45bbf7909977317faf

  • SHA512

    90a117bbfc1251361d0e8900675c6846511598544dd1df0d3eb6b2ec982a5b83bea4b81eeee9991ca84cdc44785573bc9e79eff9ff417f747990e635a42f59fb

  • SSDEEP

    24576:yKMYBN1/giWrlz3+rRu+P+FBVIceG7VX6BUxWDbuLmfq/wTL:1MI/giUlr+rRu+2FE5G7VKCxlLmS/wX

Malware Config

Targets

    • Target

      PO_2024_056209_MQ04865_ENQ_1045 (1).GZ

    • Size

      943KB

    • MD5

      6271861abdb95e51f6849c843acdae62

    • SHA1

      66cc315ad98bd5bae2ffb11729bbfdae8eefa85a

    • SHA256

      aae8699a908c3ca5211006647460cb8eb15c517a7cbf4a45bbf7909977317faf

    • SHA512

      90a117bbfc1251361d0e8900675c6846511598544dd1df0d3eb6b2ec982a5b83bea4b81eeee9991ca84cdc44785573bc9e79eff9ff417f747990e635a42f59fb

    • SSDEEP

      24576:yKMYBN1/giWrlz3+rRu+P+FBVIceG7VX6BUxWDbuLmfq/wTL:1MI/giUlr+rRu+2FE5G7VKCxlLmS/wX

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks