Extracted

• • Target

    QUOTATION00547-EVRETEKNOPROJECT.exe

  • Size

    1.8MB

  • MD5

    e32c4f7540fd5ab3ff716c2d236b0647

  • SHA1

    f94e8f2dcdc5e005a814fbbf6ec232d2d1fca434

  • SHA256

    518d9aeaf075a297467fbd6962f4a04f7f256680f9b506b4e4b51b67c185b365

  • SHA512

    f243f941e1da01090e9b672f04c624ab43e3544f49a7d8a2ae99a66a0fe119b2601b2025da9e528aafa628864b6fa939acc9b9c0882d9006161d70eff912e685

  • SSDEEP

    24576:Njc1TK7Gs05bZbtYXekG4+BiKr8Zk/oq5Yy9FXfqa0rYkorF:NlLOkG8aPYyrXuqF

  Score

  10^/10

  discoverymodiloaderwarzoneratinfostealerrattrojan

  • ModiLoader, DBatLoader

    ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    trojanmodiloader

  • Modiloader family

    modiloader

  • WarzoneRat, AveMaria

    WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

    ratinfostealerwarzonerat

  • Warzonerat family

    warzonerat

  • ModiLoader Second Stage

  • Warzone RAT payload

    rat
  behavioral1behavioral2