Analysis
-
max time kernel
132s -
max time network
148s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
-
submitted
26-09-2022 04:15
General
-
Target
SecuriteInfo.com.W32.Formbook.AA.tr.4360.exe
-
Size
653KB
-
MD5
5202df4b4093b4239a5e589df74b92e5
-
SHA1
4fdbb96ad326c1ec122967c274b8f04b4bd19763
-
SHA256
90db7becaf1c727f7d88193b95233c1f9813ff6f08681370c71f450e8305cb26
-
SHA512
9c0748c2b5c42eb9e0278d583342d22e794972436357eca7468e31fbecf95c247d620abe1a13a7f7abbc70996197a44b9a57ed0e9ac8c0f233c9327ebba9b924
-
SSDEEP
12288:Xb+ehvt30D23pDnWFFP2LC6vNE6S62avdPnjD:XSuveg4eRNXeaNnjD
Score
10/10
Malware Config
Signatures
-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage 56 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.W32.Formbook.AA.tr.4360.exe"C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.W32.Formbook.AA.tr.4360.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1476-54-0x0000000075E51000-0x0000000075E53000-memory.dmpFilesize
8KB
-
memory/1476-55-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1476-59-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1476-60-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1476-58-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1476-57-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1476-61-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1476-62-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1476-63-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1476-64-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1476-65-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1476-66-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1476-67-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1476-68-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1476-69-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1476-70-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1476-71-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1476-72-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1476-73-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1476-74-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1476-75-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1476-76-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1476-77-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1476-78-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1476-79-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1476-80-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1476-81-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1476-82-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1476-83-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1476-84-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1476-85-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1476-86-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1476-87-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1476-88-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1476-89-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1476-90-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1476-91-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1476-92-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1476-93-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1476-94-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1476-95-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1476-96-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1476-97-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1476-98-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1476-99-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1476-100-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1476-101-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1476-102-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1476-103-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1476-104-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1476-106-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1476-107-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1476-108-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1476-105-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1476-109-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1476-110-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1476-116-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB