Analysis
-
max time kernel
132s -
max time network
152s -
platform
windows7_x64 -
resource
win7-20220901-en -
resource tags
-
submitted
29-09-2022 18:35
General
-
Target
nova lista narudzbi.exe
-
Size
653KB
-
MD5
aee1c3cee2eb1b49fc9859e0ff7d2200
-
SHA1
9681c6ae132eff2e323045b56c8e2b4b50c8757c
-
SHA256
96538581d475a33de24ff6e71dcf35df1c21d2d1304da1b002edfddd777b5fa6
-
SHA512
4b3110e954024cb78e28607ecd24eeaf9f1d1e370662015d17b2194ead6dc2fb3b021a5e93786c91627ab99c05ddf706f85dc1702bb885d4e760eab249cfa9a2
-
SSDEEP
12288:Xb+ehvt30D23pDnWFFP2LCevNE6S62avdPnjD:XSuveg4eFNXeaNnjD
Score
10/10
Malware Config
Signatures
-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage 56 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\nova lista narudzbi.exe"C:\Users\Admin\AppData\Local\Temp\nova lista narudzbi.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1268-54-0x00000000757A1000-0x00000000757A3000-memory.dmpFilesize
8KB
-
memory/1268-55-0x0000000000310000-0x000000000033A000-memory.dmpFilesize
168KB
-
memory/1268-57-0x0000000000310000-0x000000000033A000-memory.dmpFilesize
168KB
-
memory/1268-58-0x0000000000310000-0x000000000033A000-memory.dmpFilesize
168KB
-
memory/1268-59-0x0000000000310000-0x000000000033A000-memory.dmpFilesize
168KB
-
memory/1268-60-0x0000000000310000-0x000000000033A000-memory.dmpFilesize
168KB
-
memory/1268-61-0x0000000000310000-0x000000000033A000-memory.dmpFilesize
168KB
-
memory/1268-62-0x0000000000310000-0x000000000033A000-memory.dmpFilesize
168KB
-
memory/1268-63-0x0000000000310000-0x000000000033A000-memory.dmpFilesize
168KB
-
memory/1268-64-0x0000000000310000-0x000000000033A000-memory.dmpFilesize
168KB
-
memory/1268-65-0x0000000000310000-0x000000000033A000-memory.dmpFilesize
168KB
-
memory/1268-66-0x0000000000310000-0x000000000033A000-memory.dmpFilesize
168KB
-
memory/1268-67-0x0000000000310000-0x000000000033A000-memory.dmpFilesize
168KB
-
memory/1268-68-0x0000000000310000-0x000000000033A000-memory.dmpFilesize
168KB
-
memory/1268-69-0x0000000000310000-0x000000000033A000-memory.dmpFilesize
168KB
-
memory/1268-70-0x0000000000310000-0x000000000033A000-memory.dmpFilesize
168KB
-
memory/1268-71-0x0000000000310000-0x000000000033A000-memory.dmpFilesize
168KB
-
memory/1268-72-0x0000000000310000-0x000000000033A000-memory.dmpFilesize
168KB
-
memory/1268-73-0x0000000000310000-0x000000000033A000-memory.dmpFilesize
168KB
-
memory/1268-74-0x0000000000310000-0x000000000033A000-memory.dmpFilesize
168KB
-
memory/1268-75-0x0000000000310000-0x000000000033A000-memory.dmpFilesize
168KB
-
memory/1268-76-0x0000000000310000-0x000000000033A000-memory.dmpFilesize
168KB
-
memory/1268-77-0x0000000000310000-0x000000000033A000-memory.dmpFilesize
168KB
-
memory/1268-78-0x0000000000310000-0x000000000033A000-memory.dmpFilesize
168KB
-
memory/1268-79-0x0000000000310000-0x000000000033A000-memory.dmpFilesize
168KB
-
memory/1268-80-0x0000000000310000-0x000000000033A000-memory.dmpFilesize
168KB
-
memory/1268-81-0x0000000000310000-0x000000000033A000-memory.dmpFilesize
168KB
-
memory/1268-82-0x0000000000310000-0x000000000033A000-memory.dmpFilesize
168KB
-
memory/1268-83-0x0000000000310000-0x000000000033A000-memory.dmpFilesize
168KB
-
memory/1268-84-0x0000000000310000-0x000000000033A000-memory.dmpFilesize
168KB
-
memory/1268-85-0x0000000000310000-0x000000000033A000-memory.dmpFilesize
168KB
-
memory/1268-86-0x0000000000310000-0x000000000033A000-memory.dmpFilesize
168KB
-
memory/1268-87-0x0000000000310000-0x000000000033A000-memory.dmpFilesize
168KB
-
memory/1268-89-0x0000000000310000-0x000000000033A000-memory.dmpFilesize
168KB
-
memory/1268-90-0x0000000000310000-0x000000000033A000-memory.dmpFilesize
168KB
-
memory/1268-88-0x0000000000310000-0x000000000033A000-memory.dmpFilesize
168KB
-
memory/1268-91-0x0000000000310000-0x000000000033A000-memory.dmpFilesize
168KB
-
memory/1268-94-0x0000000000310000-0x000000000033A000-memory.dmpFilesize
168KB
-
memory/1268-95-0x0000000000310000-0x000000000033A000-memory.dmpFilesize
168KB
-
memory/1268-93-0x0000000000310000-0x000000000033A000-memory.dmpFilesize
168KB
-
memory/1268-92-0x0000000000310000-0x000000000033A000-memory.dmpFilesize
168KB
-
memory/1268-96-0x0000000000310000-0x000000000033A000-memory.dmpFilesize
168KB
-
memory/1268-97-0x0000000000310000-0x000000000033A000-memory.dmpFilesize
168KB
-
memory/1268-98-0x0000000000310000-0x000000000033A000-memory.dmpFilesize
168KB
-
memory/1268-99-0x0000000000310000-0x000000000033A000-memory.dmpFilesize
168KB
-
memory/1268-100-0x0000000000310000-0x000000000033A000-memory.dmpFilesize
168KB
-
memory/1268-101-0x0000000000310000-0x000000000033A000-memory.dmpFilesize
168KB
-
memory/1268-102-0x0000000000310000-0x000000000033A000-memory.dmpFilesize
168KB
-
memory/1268-103-0x0000000000310000-0x000000000033A000-memory.dmpFilesize
168KB
-
memory/1268-104-0x0000000000310000-0x000000000033A000-memory.dmpFilesize
168KB
-
memory/1268-106-0x0000000000310000-0x000000000033A000-memory.dmpFilesize
168KB
-
memory/1268-107-0x0000000000310000-0x000000000033A000-memory.dmpFilesize
168KB
-
memory/1268-108-0x0000000000310000-0x000000000033A000-memory.dmpFilesize
168KB
-
memory/1268-105-0x0000000000310000-0x000000000033A000-memory.dmpFilesize
168KB
-
memory/1268-109-0x0000000000310000-0x000000000033A000-memory.dmpFilesize
168KB
-
memory/1268-110-0x0000000000310000-0x000000000033A000-memory.dmpFilesize
168KB
-
memory/1268-116-0x0000000000310000-0x000000000033A000-memory.dmpFilesize
168KB