General
- Target x.exe
- Size 1.3MB
- Sample241130-tgryfsslfq
- SHA256 d39cdd125be8be319e9e290012f8907fbb6dff000199f23eab95e47c3d8d898c
- MD5 34b4891cc12b3d975ec300a1a846c969
- SHA1 b4c1907c74fbf45e91f5a648491ea7a751246d11
- SHA512 21654dce6fd3c65f5b069056f0b5c2ae23f85677b4ed8051696e650606c722ecd0a75ed2333b241cb1f7d7fa6eb6ceaa83a36f64062c0fc8c9f8956bd94dfbb9
- SSDEEP 24576:FL1blM9t2yTLishphbtEZ+JNP+jK37K3evi91ei:FLY9Ve+v93Fa9
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
x.exe
Resource
win7-20240903-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
x.exe
Resource
win10v2004-20241007-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target x.exe
- Size 1.3MB
- SHA256 d39cdd125be8be319e9e290012f8907fbb6dff000199f23eab95e47c3d8d898c
- MD5 34b4891cc12b3d975ec300a1a846c969
- SHA1 b4c1907c74fbf45e91f5a648491ea7a751246d11
- SHA512 21654dce6fd3c65f5b069056f0b5c2ae23f85677b4ed8051696e650606c722ecd0a75ed2333b241cb1f7d7fa6eb6ceaa83a36f64062c0fc8c9f8956bd94dfbb9
- SSDEEP 24576:FL1blM9t2yTLishphbtEZ+JNP+jK37K3evi91ei:FLY9Ve+v93Fa9
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
Modiloader family
-
ModiLoader Second Stage
-
Legitimate hosting services abused for malware hosting/C2