Analysis
-
max time kernel
142s -
max time network
153s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
-
submitted
07-10-2022 16:00
General
-
Target
Document.exe
-
Size
846KB
-
MD5
2bba68a7d7b6e50b06aa7254dcb89560
-
SHA1
ef0fe10dbf1255469cea2ad8bccd7923b9126aea
-
SHA256
399068c4de8ddeb1172fcb35d13ba85550b99f322991bdf6e19c911f6436b60d
-
SHA512
38242522f3a084fe548ce93aa4a355c9bc3c6af6dbe4bba45e3e225ee160dbc2a32af784506047de250b6017b84ce962efe7aa59fa3fe14c3d9718525014cb61
-
SSDEEP
12288:YlH5qK8lRHtbc/8xKmPAKYGLgc1rTQh2wKpdgYWlvCZ1apwuvYe+msnzu8xd:YaxXW/4TPAK1J58hru2zvCZ1izGz
Score
10/10
Malware Config
Signatures
-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage 56 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Document.exe"C:\Users\Admin\AppData\Local\Temp\Document.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1348-54-0x00000000750A1000-0x00000000750A3000-memory.dmpFilesize
8KB
-
memory/1348-55-0x00000000004E0000-0x000000000050A000-memory.dmpFilesize
168KB
-
memory/1348-57-0x00000000004E0000-0x000000000050A000-memory.dmpFilesize
168KB
-
memory/1348-58-0x00000000004E0000-0x000000000050A000-memory.dmpFilesize
168KB
-
memory/1348-59-0x00000000004E0000-0x000000000050A000-memory.dmpFilesize
168KB
-
memory/1348-60-0x00000000004E0000-0x000000000050A000-memory.dmpFilesize
168KB
-
memory/1348-61-0x00000000004E0000-0x000000000050A000-memory.dmpFilesize
168KB
-
memory/1348-62-0x00000000004E0000-0x000000000050A000-memory.dmpFilesize
168KB
-
memory/1348-63-0x00000000004E0000-0x000000000050A000-memory.dmpFilesize
168KB
-
memory/1348-64-0x00000000004E0000-0x000000000050A000-memory.dmpFilesize
168KB
-
memory/1348-66-0x00000000004E0000-0x000000000050A000-memory.dmpFilesize
168KB
-
memory/1348-65-0x00000000004E0000-0x000000000050A000-memory.dmpFilesize
168KB
-
memory/1348-67-0x00000000004E0000-0x000000000050A000-memory.dmpFilesize
168KB
-
memory/1348-68-0x00000000004E0000-0x000000000050A000-memory.dmpFilesize
168KB
-
memory/1348-69-0x00000000004E0000-0x000000000050A000-memory.dmpFilesize
168KB
-
memory/1348-70-0x00000000004E0000-0x000000000050A000-memory.dmpFilesize
168KB
-
memory/1348-71-0x00000000004E0000-0x000000000050A000-memory.dmpFilesize
168KB
-
memory/1348-72-0x00000000004E0000-0x000000000050A000-memory.dmpFilesize
168KB
-
memory/1348-73-0x00000000004E0000-0x000000000050A000-memory.dmpFilesize
168KB
-
memory/1348-74-0x00000000004E0000-0x000000000050A000-memory.dmpFilesize
168KB
-
memory/1348-75-0x00000000004E0000-0x000000000050A000-memory.dmpFilesize
168KB
-
memory/1348-76-0x00000000004E0000-0x000000000050A000-memory.dmpFilesize
168KB
-
memory/1348-77-0x00000000004E0000-0x000000000050A000-memory.dmpFilesize
168KB
-
memory/1348-78-0x00000000004E0000-0x000000000050A000-memory.dmpFilesize
168KB
-
memory/1348-79-0x00000000004E0000-0x000000000050A000-memory.dmpFilesize
168KB
-
memory/1348-80-0x00000000004E0000-0x000000000050A000-memory.dmpFilesize
168KB
-
memory/1348-81-0x00000000004E0000-0x000000000050A000-memory.dmpFilesize
168KB
-
memory/1348-82-0x00000000004E0000-0x000000000050A000-memory.dmpFilesize
168KB
-
memory/1348-83-0x00000000004E0000-0x000000000050A000-memory.dmpFilesize
168KB
-
memory/1348-84-0x00000000004E0000-0x000000000050A000-memory.dmpFilesize
168KB
-
memory/1348-85-0x00000000004E0000-0x000000000050A000-memory.dmpFilesize
168KB
-
memory/1348-86-0x00000000004E0000-0x000000000050A000-memory.dmpFilesize
168KB
-
memory/1348-87-0x00000000004E0000-0x000000000050A000-memory.dmpFilesize
168KB
-
memory/1348-88-0x00000000004E0000-0x000000000050A000-memory.dmpFilesize
168KB
-
memory/1348-89-0x00000000004E0000-0x000000000050A000-memory.dmpFilesize
168KB
-
memory/1348-90-0x00000000004E0000-0x000000000050A000-memory.dmpFilesize
168KB
-
memory/1348-91-0x00000000004E0000-0x000000000050A000-memory.dmpFilesize
168KB
-
memory/1348-92-0x00000000004E0000-0x000000000050A000-memory.dmpFilesize
168KB
-
memory/1348-93-0x00000000004E0000-0x000000000050A000-memory.dmpFilesize
168KB
-
memory/1348-94-0x00000000004E0000-0x000000000050A000-memory.dmpFilesize
168KB
-
memory/1348-95-0x00000000004E0000-0x000000000050A000-memory.dmpFilesize
168KB
-
memory/1348-96-0x00000000004E0000-0x000000000050A000-memory.dmpFilesize
168KB
-
memory/1348-97-0x00000000004E0000-0x000000000050A000-memory.dmpFilesize
168KB
-
memory/1348-98-0x00000000004E0000-0x000000000050A000-memory.dmpFilesize
168KB
-
memory/1348-99-0x00000000004E0000-0x000000000050A000-memory.dmpFilesize
168KB
-
memory/1348-100-0x00000000004E0000-0x000000000050A000-memory.dmpFilesize
168KB
-
memory/1348-101-0x00000000004E0000-0x000000000050A000-memory.dmpFilesize
168KB
-
memory/1348-102-0x00000000004E0000-0x000000000050A000-memory.dmpFilesize
168KB
-
memory/1348-103-0x00000000004E0000-0x000000000050A000-memory.dmpFilesize
168KB
-
memory/1348-104-0x00000000004E0000-0x000000000050A000-memory.dmpFilesize
168KB
-
memory/1348-105-0x00000000004E0000-0x000000000050A000-memory.dmpFilesize
168KB
-
memory/1348-106-0x00000000004E0000-0x000000000050A000-memory.dmpFilesize
168KB
-
memory/1348-107-0x00000000004E0000-0x000000000050A000-memory.dmpFilesize
168KB
-
memory/1348-108-0x00000000004E0000-0x000000000050A000-memory.dmpFilesize
168KB
-
memory/1348-109-0x00000000004E0000-0x000000000050A000-memory.dmpFilesize
168KB
-
memory/1348-110-0x00000000004E0000-0x000000000050A000-memory.dmpFilesize
168KB
-
memory/1348-116-0x00000000004E0000-0x000000000050A000-memory.dmpFilesize
168KB