Overview

overview

10

Static

static

Etahlplefwxouf.exe

windows7-x64

10

Etahlplefwxouf.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    151s
  • max time network
    166s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    11-10-2022 14:10

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Etahlplefwxouf.exe

  • Size

    734KB

  • MD5

    3ae8a915191e154e1d390f011d1403b0

  • SHA1

    e36e2d035f0f4cfae0b43cde8bc276d9ea9ccb13

  • SHA256

    e57273b7f448b8713bd164d86bfd24a01570a4f5902e09fd07d6df7088458cd1

  • SHA512

    9bec68396187f51474809eb1c2a3fa1e9a21b3f8cadb33d6ad726b04afb41d6a3e6459832ec0ca13588265c748681dc1d9847883e1953b4f5f4157636cda882a

  • SSDEEP

    12288:ARGCFg0BOWvJ4sFJzZDM94u2itVSX3x7FRS8H8VML2kjO9:AMiBOWvpPlLHitVSn52rmKk

Score
10/10
modiloadertrojan

Malware Config

Signatures

  • ModiLoader, DBatLoader

    ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    trojanmodiloader
  • ModiLoader Second Stage 62 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Etahlplefwxouf.exe
    "C:\Users\Admin\AppData\Local\Temp\Etahlplefwxouf.exe"
    1⤵
      PID:2036

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2036-54-0x0000000075C61000-0x0000000075C63000-memory.dmp

      Filesize

      8KB

      Download

    • memory/2036-55-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-59-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-60-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-58-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-57-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-61-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-64-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-65-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-63-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-62-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-68-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-69-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-67-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-66-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-72-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-73-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-71-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-70-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-76-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-77-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-75-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-74-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-80-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-81-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-79-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-78-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-84-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-85-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-83-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-82-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-88-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-89-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-87-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-86-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-92-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-93-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-91-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-90-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-95-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-94-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-96-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-97-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-98-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-99-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-100-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-101-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-102-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-103-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-104-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-107-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-108-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-106-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-105-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-111-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-112-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-110-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-109-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-115-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-116-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-114-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-113-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download

    • memory/2036-117-0x0000000000390000-0x00000000003BB000-memory.dmp

      Filesize

      172KB

      Download