General

  • Target

    image.exe

  • Size

    958KB

  • Sample

    250107-ngjdes1kcr

  • MD5

    2259c943023426384e455139d63a0512

  • SHA1

    6887f434c4fd214de7065b6dbcaabdfb7e48c464

  • SHA256

    80bd5d37d851dc02ff3777786a27575787ff6742839ddbe451403c6939f56a9f

  • SHA512

    4c6743fe5af8665dda3e50dfa2b3fc195803c1ef1ba790b12c5ffbd13e462fdc90ec2ab0970932385083b4ade51160c78ac4943c9910aab8f251fca62ad80229

  • SSDEEP

    24576:diVEgcotq6RI6rU3Tr44+vKkYSKK8g1PHHtLYyEeIpTjX3:dIc6aP4cxL+PHHtLYyEeIpTjX3

Malware Config

Targets

    • Target

      image.exe

    • Size

      958KB

    • MD5

      2259c943023426384e455139d63a0512

    • SHA1

      6887f434c4fd214de7065b6dbcaabdfb7e48c464

    • SHA256

      80bd5d37d851dc02ff3777786a27575787ff6742839ddbe451403c6939f56a9f

    • SHA512

      4c6743fe5af8665dda3e50dfa2b3fc195803c1ef1ba790b12c5ffbd13e462fdc90ec2ab0970932385083b4ade51160c78ac4943c9910aab8f251fca62ad80229

    • SSDEEP

      24576:diVEgcotq6RI6rU3Tr44+vKkYSKK8g1PHHtLYyEeIpTjX3:dIc6aP4cxL+PHHtLYyEeIpTjX3

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

MITRE ATT&CK Enterprise v15

Tasks