Overview

overview

10

Static

static

10

e4cbd1a009...1d.exe

windows7-x64

10

e4cbd1a009...1d.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    39s
  • max time network
    46s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    04/12/2022, 11:20

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    e4cbd1a009376d44e5082b8aca14fda6f8f718804218bf4b4a38223650fb111d.exe

  • Size

    380KB

  • MD5

    0037828451da192640abaa7192d57809

  • SHA1

    487593376a5953b2a9c53eda43c0a1455f045c5f

  • SHA256

    e4cbd1a009376d44e5082b8aca14fda6f8f718804218bf4b4a38223650fb111d

  • SHA512

    b12dce0dabd70eb6499cf4f22e2ae1ac65b10710908ebfa044dd2cc7409466caaf70ad2b3678ab432c9dc05d342271e4faa092ee5087e98153ba4ae15e745012

  • SSDEEP

    6144:r+KkCrIU2ykH2ipsPnafFlerkb3Lrt1IKUhNtGeOc4ffDB4D:r+KbrIjXnOitlt3N1IZoeBsDB4

Score
10/10
modiloadertrojan

Malware Config

Signatures

  • ModiLoader, DBatLoader

    ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    trojanmodiloader
  • ModiLoader Second Stage 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\e4cbd1a009376d44e5082b8aca14fda6f8f718804218bf4b4a38223650fb111d.exe
    "C:\Users\Admin\AppData\Local\Temp\e4cbd1a009376d44e5082b8aca14fda6f8f718804218bf4b4a38223650fb111d.exe"
    1⤵
      PID:1660

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/1660-54-0x0000000000400000-0x000000000045F000-memory.dmp

            Filesize

            380KB

            Download