Analysis
-
max time kernel
42s -
max time network
46s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
-
submitted
23/11/2022, 19:53
General
-
Target
0cee359d0ebe2d41c6d9ffbdd40b05ac1de8137bd9634a876591155ca0d78998.exe
-
Size
34KB
-
MD5
52b025051accce9b2fa0f2ebe40b8b76
-
SHA1
6848f8336017cc36aac3172491ddacb95bee1368
-
SHA256
0cee359d0ebe2d41c6d9ffbdd40b05ac1de8137bd9634a876591155ca0d78998
-
SHA512
281256d6f34d4f101bcd1ea7d79779b27ee4bbcd16538b05acccbc029165293b3f40cc1318fda287c01c1570e9950c975e2acfc4709817201f8cac3c7c482c0f
-
SSDEEP
768:/qJCnrXKxzzfLGtm6BqCzk1gbiWrDlhpJPDSQpcNSZrduxjh6H:/qMXGLaLIt1hWrDlhpJPqAUlkH
Malware Config
Signatures
-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0cee359d0ebe2d41c6d9ffbdd40b05ac1de8137bd9634a876591155ca0d78998.exe"C:\Users\Admin\AppData\Local\Temp\0cee359d0ebe2d41c6d9ffbdd40b05ac1de8137bd9634a876591155ca0d78998.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
22KB
MD587143f201ab6838f890cc41ce400a9cb
SHA1eba0b1bcf61c7669aa32ee55b36c0185f2bac842
SHA2566cc09ac9ac7b59ac718711e0e15c1db1706d12eda760774fa382815b53fc10d5
SHA5120668db93e27753cfee2f8f75fcbfb203e98016beb299e7dce52b61789e2674435aa31d36786901895cd58401580005281461283ff2ac97c860e7173e2bc49cf9
-
Filesize
8KB
-
Filesize
144KB
-
Filesize
112KB
-
Filesize
144KB