Analysis
-
max time kernel
6s -
max time network
46s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
-
submitted
11/10/2022, 04:02
General
-
Target
2cce8f9a459b583c659ba36b7eb9470ea216bc37442de2e894392a9eb89035b0.exe
-
Size
34KB
-
MD5
621f63d7d8bc9fe5dc1e2f1b17f1ddf0
-
SHA1
bb8e1f9b21fbde23cc54c1ad7d125f4e05840682
-
SHA256
2cce8f9a459b583c659ba36b7eb9470ea216bc37442de2e894392a9eb89035b0
-
SHA512
f77d137a3f45b70a959117463102ea1bde8217903e1ccd425bf3ae28400e0ed07e64b7f45a5311bd1af25360cc632bd49de82fba96d227d1aa8f54facb943ee6
-
SSDEEP
768:/qJCnrXKxzzfLGtm6BqCzk1gbiWrDlhpJPDSQpcNSZrduxjhp:/qMXGLaLIt1hWrDlhpJPqAUlj
Malware Config
Signatures
-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2cce8f9a459b583c659ba36b7eb9470ea216bc37442de2e894392a9eb89035b0.exe"C:\Users\Admin\AppData\Local\Temp\2cce8f9a459b583c659ba36b7eb9470ea216bc37442de2e894392a9eb89035b0.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
22KB
MD50d478df25c8906870d1d02976abe69af
SHA1bb370656787c6e2d9ce246a62ed16e848e9563be
SHA2560a1548b1eb7e46808b9d60eeff2b6fa6340b03afe5e84efdd11f0ddf8335f92d
SHA512a21b6abfbba24f38c53a896a8b1f27260f14741969bb01d356d5a331cdd9be58bb33f68c14cf2f753aec6abe8505198b2deba9a35d6d6d9c40d18338e1a57988
-
Filesize
8KB
-
Filesize
144KB
-
Filesize
112KB