Analysis

  • max time kernel
    142s
  • max time network
    153s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    29-09-2022 02:47

General

  • Target

    SecuriteInfo.com.Trojan.Siggen18.52433.24924.20991.exe

  • Size

    742KB

  • MD5

    cecd0e8e9b43caa70606fcb5a6193a76

  • SHA1

    b7b3fa7b44446644a3a7f7b89852e8fde90c73b3

  • SHA256

    1b1d355eb5f82bf03c063948005173e8dcb3d5051c7dc047dadbd471eca9cc87

  • SHA512

    d0c184c8962ce3a4aa175088d3ef926ed086be7d557f6fc8d8cab0d7f02d801979f2c36c90b8edfce00bd8553552195e6a00390227d62f1ea67ac4aabd319ac5

  • SSDEEP

    12288:X1vdLGEt9CUvF8rhmJ9pKOBEffIll6A4qFEPnjDZA6pbZe:lFBt9CUd8rhmJ9rOfehF6njDJpbZe

Score
10/10

Malware Config

Signatures

  • ModiLoader, DBatLoader

    ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

  • ModiLoader Second Stage 56 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.Siggen18.52433.24924.20991.exe
    "C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.Siggen18.52433.24924.20991.exe"
    1⤵
      PID:1456

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1456-54-0x00000000768A1000-0x00000000768A3000-memory.dmp

      Filesize

      8KB

    • memory/1456-55-0x0000000000660000-0x000000000068A000-memory.dmp

      Filesize

      168KB

    • memory/1456-57-0x0000000000660000-0x000000000068A000-memory.dmp

      Filesize

      168KB

    • memory/1456-58-0x0000000000660000-0x000000000068A000-memory.dmp

      Filesize

      168KB

    • memory/1456-59-0x0000000000660000-0x000000000068A000-memory.dmp

      Filesize

      168KB

    • memory/1456-60-0x0000000000660000-0x000000000068A000-memory.dmp

      Filesize

      168KB

    • memory/1456-61-0x0000000000660000-0x000000000068A000-memory.dmp

      Filesize

      168KB

    • memory/1456-62-0x0000000000660000-0x000000000068A000-memory.dmp

      Filesize

      168KB

    • memory/1456-63-0x0000000000660000-0x000000000068A000-memory.dmp

      Filesize

      168KB

    • memory/1456-64-0x0000000000660000-0x000000000068A000-memory.dmp

      Filesize

      168KB

    • memory/1456-65-0x0000000000660000-0x000000000068A000-memory.dmp

      Filesize

      168KB

    • memory/1456-66-0x0000000000660000-0x000000000068A000-memory.dmp

      Filesize

      168KB

    • memory/1456-67-0x0000000000660000-0x000000000068A000-memory.dmp

      Filesize

      168KB

    • memory/1456-68-0x0000000000660000-0x000000000068A000-memory.dmp

      Filesize

      168KB

    • memory/1456-69-0x0000000000660000-0x000000000068A000-memory.dmp

      Filesize

      168KB

    • memory/1456-70-0x0000000000660000-0x000000000068A000-memory.dmp

      Filesize

      168KB

    • memory/1456-71-0x0000000000660000-0x000000000068A000-memory.dmp

      Filesize

      168KB

    • memory/1456-72-0x0000000000660000-0x000000000068A000-memory.dmp

      Filesize

      168KB

    • memory/1456-73-0x0000000000660000-0x000000000068A000-memory.dmp

      Filesize

      168KB

    • memory/1456-74-0x0000000000660000-0x000000000068A000-memory.dmp

      Filesize

      168KB

    • memory/1456-75-0x0000000000660000-0x000000000068A000-memory.dmp

      Filesize

      168KB

    • memory/1456-76-0x0000000000660000-0x000000000068A000-memory.dmp

      Filesize

      168KB

    • memory/1456-77-0x0000000000660000-0x000000000068A000-memory.dmp

      Filesize

      168KB

    • memory/1456-78-0x0000000000660000-0x000000000068A000-memory.dmp

      Filesize

      168KB

    • memory/1456-79-0x0000000000660000-0x000000000068A000-memory.dmp

      Filesize

      168KB

    • memory/1456-80-0x0000000000660000-0x000000000068A000-memory.dmp

      Filesize

      168KB

    • memory/1456-81-0x0000000000660000-0x000000000068A000-memory.dmp

      Filesize

      168KB

    • memory/1456-82-0x0000000000660000-0x000000000068A000-memory.dmp

      Filesize

      168KB

    • memory/1456-83-0x0000000000660000-0x000000000068A000-memory.dmp

      Filesize

      168KB

    • memory/1456-84-0x0000000000660000-0x000000000068A000-memory.dmp

      Filesize

      168KB

    • memory/1456-85-0x0000000000660000-0x000000000068A000-memory.dmp

      Filesize

      168KB

    • memory/1456-86-0x0000000000660000-0x000000000068A000-memory.dmp

      Filesize

      168KB

    • memory/1456-87-0x0000000000660000-0x000000000068A000-memory.dmp

      Filesize

      168KB

    • memory/1456-88-0x0000000000660000-0x000000000068A000-memory.dmp

      Filesize

      168KB

    • memory/1456-89-0x0000000000660000-0x000000000068A000-memory.dmp

      Filesize

      168KB

    • memory/1456-90-0x0000000000660000-0x000000000068A000-memory.dmp

      Filesize

      168KB

    • memory/1456-91-0x0000000000660000-0x000000000068A000-memory.dmp

      Filesize

      168KB

    • memory/1456-92-0x0000000000660000-0x000000000068A000-memory.dmp

      Filesize

      168KB

    • memory/1456-93-0x0000000000660000-0x000000000068A000-memory.dmp

      Filesize

      168KB

    • memory/1456-94-0x0000000000660000-0x000000000068A000-memory.dmp

      Filesize

      168KB

    • memory/1456-95-0x0000000000660000-0x000000000068A000-memory.dmp

      Filesize

      168KB

    • memory/1456-96-0x0000000000660000-0x000000000068A000-memory.dmp

      Filesize

      168KB

    • memory/1456-97-0x0000000000660000-0x000000000068A000-memory.dmp

      Filesize

      168KB

    • memory/1456-98-0x0000000000660000-0x000000000068A000-memory.dmp

      Filesize

      168KB

    • memory/1456-99-0x0000000000660000-0x000000000068A000-memory.dmp

      Filesize

      168KB

    • memory/1456-100-0x0000000000660000-0x000000000068A000-memory.dmp

      Filesize

      168KB

    • memory/1456-101-0x0000000000660000-0x000000000068A000-memory.dmp

      Filesize

      168KB

    • memory/1456-102-0x0000000000660000-0x000000000068A000-memory.dmp

      Filesize

      168KB

    • memory/1456-103-0x0000000000660000-0x000000000068A000-memory.dmp

      Filesize

      168KB

    • memory/1456-104-0x0000000000660000-0x000000000068A000-memory.dmp

      Filesize

      168KB

    • memory/1456-105-0x0000000000660000-0x000000000068A000-memory.dmp

      Filesize

      168KB

    • memory/1456-106-0x0000000000660000-0x000000000068A000-memory.dmp

      Filesize

      168KB

    • memory/1456-107-0x0000000000660000-0x000000000068A000-memory.dmp

      Filesize

      168KB

    • memory/1456-108-0x0000000000660000-0x000000000068A000-memory.dmp

      Filesize

      168KB

    • memory/1456-109-0x0000000000660000-0x000000000068A000-memory.dmp

      Filesize

      168KB

    • memory/1456-110-0x0000000000660000-0x000000000068A000-memory.dmp

      Filesize

      168KB

    • memory/1456-116-0x0000000000660000-0x000000000068A000-memory.dmp

      Filesize

      168KB