Analysis
-
max time kernel
144s -
max time network
156s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
-
submitted
02-10-2022 09:54
General
-
Target
Novi poredak.exe
-
Size
742KB
-
MD5
c71ad16cf41fe33191e7aed3ff094cb5
-
SHA1
2530410a028d56fe76cd4883ad6143c65110dfa3
-
SHA256
c65eb86aa24a5f4ded6ad0fadfb7bb2eb6e6543a4a146f1dd05ae88bb7354375
-
SHA512
c25844433fe78448977f689fd4afd070316c9e1c3544dd24a444d3efb193e183a063b834f3c045f27fe919c24b1d919dc6fc19229a1a2fa49a89949308f568ec
-
SSDEEP
12288:X1vdLGEt9CUvF8rhmJ9pKOBEffIll6A4qFEPnjDZ46pbZe:lFBt9CUd8rhmJ9rOfehF6njDlpbZe
Score
10/10
Malware Config
Signatures
-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage 56 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Novi poredak.exe"C:\Users\Admin\AppData\Local\Temp\Novi poredak.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2020-54-0x0000000075451000-0x0000000075453000-memory.dmpFilesize
8KB
-
memory/2020-55-0x0000000000260000-0x000000000028A000-memory.dmpFilesize
168KB
-
memory/2020-57-0x0000000000260000-0x000000000028A000-memory.dmpFilesize
168KB
-
memory/2020-58-0x0000000000260000-0x000000000028A000-memory.dmpFilesize
168KB
-
memory/2020-59-0x0000000000260000-0x000000000028A000-memory.dmpFilesize
168KB
-
memory/2020-61-0x0000000000260000-0x000000000028A000-memory.dmpFilesize
168KB
-
memory/2020-60-0x0000000000260000-0x000000000028A000-memory.dmpFilesize
168KB
-
memory/2020-62-0x0000000000260000-0x000000000028A000-memory.dmpFilesize
168KB
-
memory/2020-63-0x0000000000260000-0x000000000028A000-memory.dmpFilesize
168KB
-
memory/2020-64-0x0000000000260000-0x000000000028A000-memory.dmpFilesize
168KB
-
memory/2020-66-0x0000000000260000-0x000000000028A000-memory.dmpFilesize
168KB
-
memory/2020-65-0x0000000000260000-0x000000000028A000-memory.dmpFilesize
168KB
-
memory/2020-67-0x0000000000260000-0x000000000028A000-memory.dmpFilesize
168KB
-
memory/2020-68-0x0000000000260000-0x000000000028A000-memory.dmpFilesize
168KB
-
memory/2020-70-0x0000000000260000-0x000000000028A000-memory.dmpFilesize
168KB
-
memory/2020-69-0x0000000000260000-0x000000000028A000-memory.dmpFilesize
168KB
-
memory/2020-71-0x0000000000260000-0x000000000028A000-memory.dmpFilesize
168KB
-
memory/2020-72-0x0000000000260000-0x000000000028A000-memory.dmpFilesize
168KB
-
memory/2020-74-0x0000000000260000-0x000000000028A000-memory.dmpFilesize
168KB
-
memory/2020-73-0x0000000000260000-0x000000000028A000-memory.dmpFilesize
168KB
-
memory/2020-75-0x0000000000260000-0x000000000028A000-memory.dmpFilesize
168KB
-
memory/2020-76-0x0000000000260000-0x000000000028A000-memory.dmpFilesize
168KB
-
memory/2020-77-0x0000000000260000-0x000000000028A000-memory.dmpFilesize
168KB
-
memory/2020-78-0x0000000000260000-0x000000000028A000-memory.dmpFilesize
168KB
-
memory/2020-79-0x0000000000260000-0x000000000028A000-memory.dmpFilesize
168KB
-
memory/2020-81-0x0000000000260000-0x000000000028A000-memory.dmpFilesize
168KB
-
memory/2020-80-0x0000000000260000-0x000000000028A000-memory.dmpFilesize
168KB
-
memory/2020-82-0x0000000000260000-0x000000000028A000-memory.dmpFilesize
168KB
-
memory/2020-83-0x0000000000260000-0x000000000028A000-memory.dmpFilesize
168KB
-
memory/2020-85-0x0000000000260000-0x000000000028A000-memory.dmpFilesize
168KB
-
memory/2020-84-0x0000000000260000-0x000000000028A000-memory.dmpFilesize
168KB
-
memory/2020-86-0x0000000000260000-0x000000000028A000-memory.dmpFilesize
168KB
-
memory/2020-87-0x0000000000260000-0x000000000028A000-memory.dmpFilesize
168KB
-
memory/2020-89-0x0000000000260000-0x000000000028A000-memory.dmpFilesize
168KB
-
memory/2020-88-0x0000000000260000-0x000000000028A000-memory.dmpFilesize
168KB
-
memory/2020-90-0x0000000000260000-0x000000000028A000-memory.dmpFilesize
168KB
-
memory/2020-91-0x0000000000260000-0x000000000028A000-memory.dmpFilesize
168KB
-
memory/2020-93-0x0000000000260000-0x000000000028A000-memory.dmpFilesize
168KB
-
memory/2020-92-0x0000000000260000-0x000000000028A000-memory.dmpFilesize
168KB
-
memory/2020-95-0x0000000000260000-0x000000000028A000-memory.dmpFilesize
168KB
-
memory/2020-94-0x0000000000260000-0x000000000028A000-memory.dmpFilesize
168KB
-
memory/2020-96-0x0000000000260000-0x000000000028A000-memory.dmpFilesize
168KB
-
memory/2020-99-0x0000000000260000-0x000000000028A000-memory.dmpFilesize
168KB
-
memory/2020-98-0x0000000000260000-0x000000000028A000-memory.dmpFilesize
168KB
-
memory/2020-97-0x0000000000260000-0x000000000028A000-memory.dmpFilesize
168KB
-
memory/2020-100-0x0000000000260000-0x000000000028A000-memory.dmpFilesize
168KB
-
memory/2020-104-0x0000000000260000-0x000000000028A000-memory.dmpFilesize
168KB
-
memory/2020-103-0x0000000000260000-0x000000000028A000-memory.dmpFilesize
168KB
-
memory/2020-102-0x0000000000260000-0x000000000028A000-memory.dmpFilesize
168KB
-
memory/2020-101-0x0000000000260000-0x000000000028A000-memory.dmpFilesize
168KB
-
memory/2020-105-0x0000000000260000-0x000000000028A000-memory.dmpFilesize
168KB
-
memory/2020-106-0x0000000000260000-0x000000000028A000-memory.dmpFilesize
168KB
-
memory/2020-107-0x0000000000260000-0x000000000028A000-memory.dmpFilesize
168KB
-
memory/2020-109-0x0000000000260000-0x000000000028A000-memory.dmpFilesize
168KB
-
memory/2020-108-0x0000000000260000-0x000000000028A000-memory.dmpFilesize
168KB
-
memory/2020-110-0x0000000000260000-0x000000000028A000-memory.dmpFilesize
168KB
-
memory/2020-116-0x0000000000260000-0x000000000028A000-memory.dmpFilesize
168KB