Analysis
-
max time kernel
191s -
max time network
192s -
platform
windows10-2004_x64 -
resource
win10v2004-20220721-en -
resource tags
arch:x64arch:x86image:win10v2004-20220721-enlocale:en-usos:windows10-2004-x64system -
submitted
02-08-2022 06:06
Static task
static1
Behavioral task
behavioral1
Sample
Izjava u prilogu.exe
Resource
win7-20220718-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Izjava u prilogu.exe
Resource
win10v2004-20220721-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
Izjava u prilogu.exe
-
Size
836KB
-
MD5
07789017f254b6ac45b11f66ccada623
-
SHA1
6957e2bd7068f1303723c2ba3075771cdbcb23f0
-
SHA256
d17de6f437033140a8197c29721e535e19cde342b211c3a0074fa54f79afb375
-
SHA512
b30f98657c5069185af2e7a84af4bb2b2d73e9c7a455beae520668a6b40420e0f4d5f19333ec6f7ec45a74c8544f88d449ea1b8d2eacadf22e574b39a384e8b1
Score
10/10
Malware Config
Signatures
-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage 19 IoCs
Processes:
resource yara_rule behavioral2/memory/2628-148-0x0000000004EB0000-0x0000000004F95000-memory.dmp modiloader_stage2 behavioral2/memory/2628-161-0x0000000004EB0000-0x0000000004F95000-memory.dmp modiloader_stage2 behavioral2/memory/2628-162-0x0000000004EB0000-0x0000000004F95000-memory.dmp modiloader_stage2 behavioral2/memory/2628-163-0x0000000004EB0000-0x0000000004F95000-memory.dmp modiloader_stage2 behavioral2/memory/2628-164-0x0000000004EB0000-0x0000000004F95000-memory.dmp modiloader_stage2 behavioral2/memory/2628-165-0x0000000004EB0000-0x0000000004F95000-memory.dmp modiloader_stage2 behavioral2/memory/2628-166-0x0000000004EB0000-0x0000000004F95000-memory.dmp modiloader_stage2 behavioral2/memory/2628-167-0x0000000004EB0000-0x0000000004F95000-memory.dmp modiloader_stage2 behavioral2/memory/2628-168-0x0000000004EB0000-0x0000000004F95000-memory.dmp modiloader_stage2 behavioral2/memory/2628-169-0x0000000004EB0000-0x0000000004F95000-memory.dmp modiloader_stage2 behavioral2/memory/2628-170-0x0000000004EB0000-0x0000000004F95000-memory.dmp modiloader_stage2 behavioral2/memory/2628-171-0x0000000004EB0000-0x0000000004F95000-memory.dmp modiloader_stage2 behavioral2/memory/2628-172-0x0000000004EB0000-0x0000000004F95000-memory.dmp modiloader_stage2 behavioral2/memory/2628-173-0x0000000004EB0000-0x0000000004F95000-memory.dmp modiloader_stage2 behavioral2/memory/2628-174-0x0000000004EB0000-0x0000000004F95000-memory.dmp modiloader_stage2 behavioral2/memory/2628-175-0x0000000004EB0000-0x0000000004F95000-memory.dmp modiloader_stage2 behavioral2/memory/2628-176-0x0000000004EB0000-0x0000000004F95000-memory.dmp modiloader_stage2 behavioral2/memory/2628-177-0x0000000004EB0000-0x0000000004F95000-memory.dmp modiloader_stage2 behavioral2/memory/2628-178-0x0000000004EB0000-0x0000000004F95000-memory.dmp modiloader_stage2
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2628-148-0x0000000004EB0000-0x0000000004F95000-memory.dmpFilesize
916KB
-
memory/2628-161-0x0000000004EB0000-0x0000000004F95000-memory.dmpFilesize
916KB
-
memory/2628-162-0x0000000004EB0000-0x0000000004F95000-memory.dmpFilesize
916KB
-
memory/2628-163-0x0000000004EB0000-0x0000000004F95000-memory.dmpFilesize
916KB
-
memory/2628-164-0x0000000004EB0000-0x0000000004F95000-memory.dmpFilesize
916KB
-
memory/2628-165-0x0000000004EB0000-0x0000000004F95000-memory.dmpFilesize
916KB
-
memory/2628-166-0x0000000004EB0000-0x0000000004F95000-memory.dmpFilesize
916KB
-
memory/2628-167-0x0000000004EB0000-0x0000000004F95000-memory.dmpFilesize
916KB
-
memory/2628-168-0x0000000004EB0000-0x0000000004F95000-memory.dmpFilesize
916KB
-
memory/2628-169-0x0000000004EB0000-0x0000000004F95000-memory.dmpFilesize
916KB
-
memory/2628-170-0x0000000004EB0000-0x0000000004F95000-memory.dmpFilesize
916KB
-
memory/2628-171-0x0000000004EB0000-0x0000000004F95000-memory.dmpFilesize
916KB
-
memory/2628-172-0x0000000004EB0000-0x0000000004F95000-memory.dmpFilesize
916KB
-
memory/2628-173-0x0000000004EB0000-0x0000000004F95000-memory.dmpFilesize
916KB
-
memory/2628-174-0x0000000004EB0000-0x0000000004F95000-memory.dmpFilesize
916KB
-
memory/2628-175-0x0000000004EB0000-0x0000000004F95000-memory.dmpFilesize
916KB
-
memory/2628-176-0x0000000004EB0000-0x0000000004F95000-memory.dmpFilesize
916KB
-
memory/2628-177-0x0000000004EB0000-0x0000000004F95000-memory.dmpFilesize
916KB
-
memory/2628-178-0x0000000004EB0000-0x0000000004F95000-memory.dmpFilesize
916KB