Overview

overview

10

Static

static

tmp.exe

windows7-x64

10

tmp.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    135s
  • max time network
    151s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    04-10-2022 19:25

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    tmp.exe

  • Size

    940KB

  • MD5

    dbbd5f34648cc1a20d0022c47a6531a6

  • SHA1

    84bc195e56cdc6804cb987af330608ef5b173a67

  • SHA256

    f8612ea8ab764a3d09157a9b90dc418ec2a7b8af22b29ce63d375896f9ec9a28

  • SHA512

    6d44509bfb38afe4490034736e20dc59cd97de0a4e8cdbdddcd353f7ba5a470a1288f6a2761fa31d4c81bfdf0f6dc8cd56581e27f138e783ecea3e520d9819b3

  • SSDEEP

    24576:xuLJQ0+ai+JoMCXlTjcEa0s4Tj29W8AoqiVNWI:xUpRx+cEa0Q

Score
10/10
modiloadertrojan

Malware Config

Signatures

  • ModiLoader, DBatLoader

    ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    trojanmodiloader
  • ModiLoader Second Stage 62 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\tmp.exe
    "C:\Users\Admin\AppData\Local\Temp\tmp.exe"
    1⤵
      PID:1416

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1416-54-0x0000000074DC1000-0x0000000074DC3000-memory.dmp
      Filesize

      8KB

      Download
    • memory/1416-55-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-58-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-57-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-59-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-60-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-61-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-62-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-63-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-64-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-65-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-66-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-67-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-68-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-69-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-70-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-71-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-72-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-73-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-74-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-75-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-76-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-77-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-78-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-80-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-79-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-81-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-82-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-83-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-84-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-85-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-86-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-87-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-89-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-88-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-90-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-91-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-92-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-93-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-94-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-95-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-96-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-97-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-98-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-99-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-100-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-101-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-102-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-103-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-104-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-105-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-106-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-107-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-108-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-109-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-111-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-110-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-112-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-113-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-115-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-114-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-116-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download
    • memory/1416-117-0x0000000000500000-0x0000000000564000-memory.dmp
      Filesize

      400KB

      Download