Analysis

  • max time kernel
    191s
  • max time network
    192s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220721-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220721-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02-08-2022 06:06

General

  • Target

    Izjava u prilogu.exe

  • Size

    836KB

  • MD5

    07789017f254b6ac45b11f66ccada623

  • SHA1

    6957e2bd7068f1303723c2ba3075771cdbcb23f0

  • SHA256

    d17de6f437033140a8197c29721e535e19cde342b211c3a0074fa54f79afb375

  • SHA512

    b30f98657c5069185af2e7a84af4bb2b2d73e9c7a455beae520668a6b40420e0f4d5f19333ec6f7ec45a74c8544f88d449ea1b8d2eacadf22e574b39a384e8b1

Score
10/10

Malware Config

Signatures

  • ModiLoader, DBatLoader

    ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

  • ModiLoader Second Stage 19 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Izjava u prilogu.exe
    "C:\Users\Admin\AppData\Local\Temp\Izjava u prilogu.exe"
    1⤵
      PID:2628

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2628-148-0x0000000004EB0000-0x0000000004F95000-memory.dmp
      Filesize

      916KB

    • memory/2628-161-0x0000000004EB0000-0x0000000004F95000-memory.dmp
      Filesize

      916KB

    • memory/2628-162-0x0000000004EB0000-0x0000000004F95000-memory.dmp
      Filesize

      916KB

    • memory/2628-163-0x0000000004EB0000-0x0000000004F95000-memory.dmp
      Filesize

      916KB

    • memory/2628-164-0x0000000004EB0000-0x0000000004F95000-memory.dmp
      Filesize

      916KB

    • memory/2628-165-0x0000000004EB0000-0x0000000004F95000-memory.dmp
      Filesize

      916KB

    • memory/2628-166-0x0000000004EB0000-0x0000000004F95000-memory.dmp
      Filesize

      916KB

    • memory/2628-167-0x0000000004EB0000-0x0000000004F95000-memory.dmp
      Filesize

      916KB

    • memory/2628-168-0x0000000004EB0000-0x0000000004F95000-memory.dmp
      Filesize

      916KB

    • memory/2628-169-0x0000000004EB0000-0x0000000004F95000-memory.dmp
      Filesize

      916KB

    • memory/2628-170-0x0000000004EB0000-0x0000000004F95000-memory.dmp
      Filesize

      916KB

    • memory/2628-171-0x0000000004EB0000-0x0000000004F95000-memory.dmp
      Filesize

      916KB

    • memory/2628-172-0x0000000004EB0000-0x0000000004F95000-memory.dmp
      Filesize

      916KB

    • memory/2628-173-0x0000000004EB0000-0x0000000004F95000-memory.dmp
      Filesize

      916KB

    • memory/2628-174-0x0000000004EB0000-0x0000000004F95000-memory.dmp
      Filesize

      916KB

    • memory/2628-175-0x0000000004EB0000-0x0000000004F95000-memory.dmp
      Filesize

      916KB

    • memory/2628-176-0x0000000004EB0000-0x0000000004F95000-memory.dmp
      Filesize

      916KB

    • memory/2628-177-0x0000000004EB0000-0x0000000004F95000-memory.dmp
      Filesize

      916KB

    • memory/2628-178-0x0000000004EB0000-0x0000000004F95000-memory.dmp
      Filesize

      916KB