Analysis
-
max time kernel
142s -
max time network
150s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
-
submitted
29-08-2022 08:53
General
-
Target
6d06e702cc1663f928525b277c7271d2.exe
-
Size
958KB
-
MD5
6d06e702cc1663f928525b277c7271d2
-
SHA1
9f4978bad5e505fdf91c2c1c8935f6d2f83b53ac
-
SHA256
25293848f280e7c411e41b50f30e780388fbff268cdfb5d230fda45fbc911b6b
-
SHA512
7724cf8c048434eb390e1ca88bde4f030d143b9e7713706bb080681dd751ad105abdc5c76c79ca24ffa65ffca98c4dd9442df57ffc92c76027f8bc08137caa6a
-
SSDEEP
24576:MrTz0kNGlNCc5Ftkku4nzSrSdN40JIyE9WDvk:MrT4LN9Ftkku4nzSrSdmWbaW
Malware Config
Signatures
-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage 46 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\6d06e702cc1663f928525b277c7271d2.exe"C:\Users\Admin\AppData\Local\Temp\6d06e702cc1663f928525b277c7271d2.exe"1⤵
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
344KB
-
Filesize
344KB
-
Filesize
344KB
-
Filesize
344KB
-
Filesize
344KB
-
Filesize
344KB
-
Filesize
344KB
-
Filesize
344KB
-
Filesize
344KB
-
Filesize
344KB
-
Filesize
344KB
-
Filesize
344KB
-
Filesize
344KB
-
Filesize
344KB
-
Filesize
344KB
-
Filesize
344KB
-
Filesize
344KB
-
Filesize
344KB
-
Filesize
344KB
-
Filesize
344KB
-
Filesize
344KB
-
Filesize
344KB
-
Filesize
344KB
-
Filesize
344KB
-
Filesize
344KB
-
Filesize
344KB
-
Filesize
344KB
-
Filesize
344KB
-
Filesize
344KB
-
Filesize
344KB
-
Filesize
344KB
-
Filesize
344KB
-
Filesize
344KB
-
Filesize
344KB
-
Filesize
344KB
-
Filesize
344KB
-
Filesize
344KB
-
Filesize
344KB
-
Filesize
344KB
-
Filesize
344KB
-
Filesize
344KB
-
Filesize
344KB
-
Filesize
344KB
-
Filesize
344KB
-
Filesize
344KB
-
Filesize
344KB