Overview

overview

10

Static

static

CJYUAEBL.exe

windows7-x64

10

CJYUAEBL.exe

windows10-2004-x64

10

Resubmissions

05-12-2022 20:48

221205-zlvssshg5t 10

05-12-2022 20:07

221205-ywb8rseh41 10

Analysis

  • max time kernel
    172s
  • max time network
    188s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    05-12-2022 20:07

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    CJYUAEBL.exe

  • Size

    1010KB

  • MD5

    7cb5f631784c4e56f1bbbd2db5e08cf4

  • SHA1

    467bcd4c278b2fae07b3dfb68b29814f0c1ec606

  • SHA256

    ffa9f3d0e3d4d29b10cba30fe3394d538b8c415e9c29cf36a56990e9204ec7bf

  • SHA512

    07ec1ed2124d24c02438fec3cd9ca65897f320fcb324192f5717ff0759c3a6a24e04e88dff84fd4ba37e0370c24d092231c93147fe90e93ce981cda6335d33f2

  • SSDEEP

    24576:owfXt2qCbasU3cyK9pNhMhtrjxLF7ZQ/ronBb5:oEcO+9bh+1lLFaMnBb

Score
10/10
modiloadertrojan

Malware Config

Signatures

  • ModiLoader, DBatLoader

    ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    trojanmodiloader
  • ModiLoader Second Stage 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\CJYUAEBL.exe
    "C:\Users\Admin\AppData\Local\Temp\CJYUAEBL.exe"
    1⤵
      PID:528

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/528-54-0x0000000075DF1000-0x0000000075DF3000-memory.dmp
      Filesize

      8KB

      Download
    • memory/528-55-0x0000000000290000-0x00000000002BB000-memory.dmp
      Filesize

      172KB

      Download