Analysis
-
max time kernel
142s -
max time network
153s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
29-09-2022 02:47
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Trojan.Siggen18.52433.24924.20991.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Trojan.Siggen18.52433.24924.20991.exe
Resource
win10v2004-20220812-en
General
-
Target
SecuriteInfo.com.Trojan.Siggen18.52433.24924.20991.exe
-
Size
742KB
-
MD5
cecd0e8e9b43caa70606fcb5a6193a76
-
SHA1
b7b3fa7b44446644a3a7f7b89852e8fde90c73b3
-
SHA256
1b1d355eb5f82bf03c063948005173e8dcb3d5051c7dc047dadbd471eca9cc87
-
SHA512
d0c184c8962ce3a4aa175088d3ef926ed086be7d557f6fc8d8cab0d7f02d801979f2c36c90b8edfce00bd8553552195e6a00390227d62f1ea67ac4aabd319ac5
-
SSDEEP
12288:X1vdLGEt9CUvF8rhmJ9pKOBEffIll6A4qFEPnjDZA6pbZe:lFBt9CUd8rhmJ9rOfehF6njDJpbZe
Malware Config
Signatures
-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage 56 IoCs
Processes:
resource yara_rule behavioral1/memory/1456-55-0x0000000000660000-0x000000000068A000-memory.dmp modiloader_stage2 behavioral1/memory/1456-57-0x0000000000660000-0x000000000068A000-memory.dmp modiloader_stage2 behavioral1/memory/1456-58-0x0000000000660000-0x000000000068A000-memory.dmp modiloader_stage2 behavioral1/memory/1456-59-0x0000000000660000-0x000000000068A000-memory.dmp modiloader_stage2 behavioral1/memory/1456-60-0x0000000000660000-0x000000000068A000-memory.dmp modiloader_stage2 behavioral1/memory/1456-61-0x0000000000660000-0x000000000068A000-memory.dmp modiloader_stage2 behavioral1/memory/1456-62-0x0000000000660000-0x000000000068A000-memory.dmp modiloader_stage2 behavioral1/memory/1456-63-0x0000000000660000-0x000000000068A000-memory.dmp modiloader_stage2 behavioral1/memory/1456-64-0x0000000000660000-0x000000000068A000-memory.dmp modiloader_stage2 behavioral1/memory/1456-65-0x0000000000660000-0x000000000068A000-memory.dmp modiloader_stage2 behavioral1/memory/1456-66-0x0000000000660000-0x000000000068A000-memory.dmp modiloader_stage2 behavioral1/memory/1456-67-0x0000000000660000-0x000000000068A000-memory.dmp modiloader_stage2 behavioral1/memory/1456-68-0x0000000000660000-0x000000000068A000-memory.dmp modiloader_stage2 behavioral1/memory/1456-69-0x0000000000660000-0x000000000068A000-memory.dmp modiloader_stage2 behavioral1/memory/1456-70-0x0000000000660000-0x000000000068A000-memory.dmp modiloader_stage2 behavioral1/memory/1456-71-0x0000000000660000-0x000000000068A000-memory.dmp modiloader_stage2 behavioral1/memory/1456-72-0x0000000000660000-0x000000000068A000-memory.dmp modiloader_stage2 behavioral1/memory/1456-73-0x0000000000660000-0x000000000068A000-memory.dmp modiloader_stage2 behavioral1/memory/1456-74-0x0000000000660000-0x000000000068A000-memory.dmp modiloader_stage2 behavioral1/memory/1456-75-0x0000000000660000-0x000000000068A000-memory.dmp modiloader_stage2 behavioral1/memory/1456-76-0x0000000000660000-0x000000000068A000-memory.dmp modiloader_stage2 behavioral1/memory/1456-77-0x0000000000660000-0x000000000068A000-memory.dmp modiloader_stage2 behavioral1/memory/1456-78-0x0000000000660000-0x000000000068A000-memory.dmp modiloader_stage2 behavioral1/memory/1456-79-0x0000000000660000-0x000000000068A000-memory.dmp modiloader_stage2 behavioral1/memory/1456-80-0x0000000000660000-0x000000000068A000-memory.dmp modiloader_stage2 behavioral1/memory/1456-81-0x0000000000660000-0x000000000068A000-memory.dmp modiloader_stage2 behavioral1/memory/1456-82-0x0000000000660000-0x000000000068A000-memory.dmp modiloader_stage2 behavioral1/memory/1456-83-0x0000000000660000-0x000000000068A000-memory.dmp modiloader_stage2 behavioral1/memory/1456-84-0x0000000000660000-0x000000000068A000-memory.dmp modiloader_stage2 behavioral1/memory/1456-85-0x0000000000660000-0x000000000068A000-memory.dmp modiloader_stage2 behavioral1/memory/1456-86-0x0000000000660000-0x000000000068A000-memory.dmp modiloader_stage2 behavioral1/memory/1456-87-0x0000000000660000-0x000000000068A000-memory.dmp modiloader_stage2 behavioral1/memory/1456-88-0x0000000000660000-0x000000000068A000-memory.dmp modiloader_stage2 behavioral1/memory/1456-89-0x0000000000660000-0x000000000068A000-memory.dmp modiloader_stage2 behavioral1/memory/1456-90-0x0000000000660000-0x000000000068A000-memory.dmp modiloader_stage2 behavioral1/memory/1456-91-0x0000000000660000-0x000000000068A000-memory.dmp modiloader_stage2 behavioral1/memory/1456-92-0x0000000000660000-0x000000000068A000-memory.dmp modiloader_stage2 behavioral1/memory/1456-93-0x0000000000660000-0x000000000068A000-memory.dmp modiloader_stage2 behavioral1/memory/1456-94-0x0000000000660000-0x000000000068A000-memory.dmp modiloader_stage2 behavioral1/memory/1456-95-0x0000000000660000-0x000000000068A000-memory.dmp modiloader_stage2 behavioral1/memory/1456-96-0x0000000000660000-0x000000000068A000-memory.dmp modiloader_stage2 behavioral1/memory/1456-97-0x0000000000660000-0x000000000068A000-memory.dmp modiloader_stage2 behavioral1/memory/1456-98-0x0000000000660000-0x000000000068A000-memory.dmp modiloader_stage2 behavioral1/memory/1456-99-0x0000000000660000-0x000000000068A000-memory.dmp modiloader_stage2 behavioral1/memory/1456-100-0x0000000000660000-0x000000000068A000-memory.dmp modiloader_stage2 behavioral1/memory/1456-101-0x0000000000660000-0x000000000068A000-memory.dmp modiloader_stage2 behavioral1/memory/1456-102-0x0000000000660000-0x000000000068A000-memory.dmp modiloader_stage2 behavioral1/memory/1456-103-0x0000000000660000-0x000000000068A000-memory.dmp modiloader_stage2 behavioral1/memory/1456-104-0x0000000000660000-0x000000000068A000-memory.dmp modiloader_stage2 behavioral1/memory/1456-105-0x0000000000660000-0x000000000068A000-memory.dmp modiloader_stage2 behavioral1/memory/1456-106-0x0000000000660000-0x000000000068A000-memory.dmp modiloader_stage2 behavioral1/memory/1456-107-0x0000000000660000-0x000000000068A000-memory.dmp modiloader_stage2 behavioral1/memory/1456-108-0x0000000000660000-0x000000000068A000-memory.dmp modiloader_stage2 behavioral1/memory/1456-109-0x0000000000660000-0x000000000068A000-memory.dmp modiloader_stage2 behavioral1/memory/1456-110-0x0000000000660000-0x000000000068A000-memory.dmp modiloader_stage2 behavioral1/memory/1456-116-0x0000000000660000-0x000000000068A000-memory.dmp modiloader_stage2