General
-
Target
03042025_0813_02042025_景大 台北港ISF (032525) - invoice# JN-032525C - KAO TO ATLANTA-GA VIA NYC CFS【友鋮】SO.N023.xlsx.rar
-
Size
2.1MB
-
Sample
250403-j4ld3ssye1
-
MD5
3d8130ad36286fe491f10a2e90bbb9db
-
SHA1
48d5aa35b265476fdef2e432fcb0864ab049d378
-
SHA256
039412a7bc7448a2cb2bef31c3cb4aa8cb58ae1eb61835082a45741fe8564624
-
SHA512
4b26cdec19f0a535f0a7eccca1cc28c81c648bcff7eff6719c15f55fbff948511076df6a8c82b3d774e1e3f20379340b0c3f1680960118eb3a8f6b89ad0745ae
-
SSDEEP
49152:E5R2TGOBTQv54QdZb5R2TGOBTQv54QdZa:q4SO1QvTrV4SO1QvTra
Static task
static1
Behavioral task
behavioral1
Sample
SKM_BH450i241126113808768679897786756452434657687867565645354768789090989786643.scr
Resource
win10v2004-20250314-en
Behavioral task
behavioral2
Sample
景大 台北港ISF (032525) - invoice# JN-032525C - KAO TO ATLANTA,GA VIA NYC CFS【友鋮】SO.N023.xlsx.scr
Resource
win10v2004-20250314-en
Malware Config
Targets
-
-
Target
SKM_BH450i241126113808768679897786756452434657687867565645354768789090989786643.scr
-
Size
1.6MB
-
MD5
fd369e87839e7d68d18209317decc88e
-
SHA1
116042c1f6f8e98adcc054cca6817daba5c2ac99
-
SHA256
0d8d4ae98a1216a5e84c11a34b8c9e9f87f92753cd49029c709bec46cde8845e
-
SHA512
a44f46bb7e8f7df4e975e96557adc538202d7afb987b6193298a5a2b285962e41b5769013b27b402f55ea7802d04c63f5144218fa95eb155ec86dcb8b9aeb59b
-
SSDEEP
49152:Gp1cZwfxJMCbRblfBO1h1TqnNa7Ic82rW:GUyRblJwTqnNNd
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
Modiloader family
-
ModiLoader Second Stage
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
-
-
Target
景大 台北港ISF (032525) - invoice# JN-032525C - KAO TO ATLANTA,GA VIA NYC CFS【友鋮】SO.N023.xlsx.scr
-
Size
1.6MB
-
MD5
fd369e87839e7d68d18209317decc88e
-
SHA1
116042c1f6f8e98adcc054cca6817daba5c2ac99
-
SHA256
0d8d4ae98a1216a5e84c11a34b8c9e9f87f92753cd49029c709bec46cde8845e
-
SHA512
a44f46bb7e8f7df4e975e96557adc538202d7afb987b6193298a5a2b285962e41b5769013b27b402f55ea7802d04c63f5144218fa95eb155ec86dcb8b9aeb59b
-
SSDEEP
49152:Gp1cZwfxJMCbRblfBO1h1TqnNa7Ic82rW:GUyRblJwTqnNNd
Score3/10 -
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1