Analysis
-
max time kernel
132s -
max time network
148s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
-
submitted
05-10-2022 07:14
General
-
Target
SK0324415442514.exe
-
Size
755KB
-
MD5
7559df8faf8ba180c3897381a3b7effe
-
SHA1
1a4d63ff3ade49d8f196b94e34c051c2b2fa90fe
-
SHA256
54935eef1c0264f4897f97723ecc59f04673453baf5bacb4eaa6fc1ac75b88ac
-
SHA512
8d05dee4b7bd77c4a1187f3dae055f85fb84cf92db7d3db878db74177ee9b45f3b95f0aea28140a0b7a288230706f7b56097912e48e64c7ded078e338fa612fd
-
SSDEEP
12288:dMtnZYA3k+tEeWqFZip4Be+GA7Pes9q1ia9r0vYe+mY6Q4eYrP:WZY5+tEeWqFZip4B57Pd9qlqC6Q
Score
10/10
Malware Config
Signatures
-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage 56 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\SK0324415442514.exe"C:\Users\Admin\AppData\Local\Temp\SK0324415442514.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1044-54-0x0000000075071000-0x0000000075073000-memory.dmpFilesize
8KB
-
memory/1044-55-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1044-57-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1044-58-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1044-59-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1044-60-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1044-61-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1044-62-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1044-63-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1044-64-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1044-65-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1044-66-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1044-67-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1044-68-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1044-69-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1044-70-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1044-71-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1044-72-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1044-73-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1044-74-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1044-75-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1044-76-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1044-77-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1044-78-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1044-79-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1044-80-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1044-81-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1044-82-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1044-83-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1044-84-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1044-85-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1044-86-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1044-87-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1044-88-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1044-89-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1044-90-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1044-91-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1044-92-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1044-93-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1044-94-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1044-95-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1044-96-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1044-97-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1044-98-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1044-99-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1044-100-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1044-101-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1044-102-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1044-103-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1044-104-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1044-105-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1044-106-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1044-107-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1044-108-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1044-109-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1044-110-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB
-
memory/1044-116-0x00000000002B0000-0x00000000002DA000-memory.dmpFilesize
168KB