modiloader | b2405a2b79d7c7a39194b953b18857cae0406e917eb4c3346bb990addef76dc1 | Triage

Analysis

max time kernel
215s
max time network
304s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
05-12-2022 20:08

Sharing

Report Analysis Logs

General

Target

CJYUAEBL.exe
Size

1010KB
MD5

2ae6e69113d98e4f3bb815c21f626496
SHA1

78920f0064d350e24812fda6c5658ac6177b5cf5
SHA256

0305b3a95aff122c888a200de747a565208ea19494c8257b0c972084141f42c4
SHA512

c7afbd664a2eebeeac3bdd01a359ea74da953552cad187682d431f0af754725a08f1135457618618a51bf1e3893a6c3a0c05e68172ee9eefcb020187ab8dfd0e
SSDEEP

24576:owfXt2qCbasU3cyK9pNhMhtrjxLF7ZQ/ronBb5:oEcO+9bh+1lLFaMnBb

Score

10^/10

modiloader trojan

Malware Config

Signatures

ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
trojan modiloader

ModiLoader Second Stage 1 IoCs

Processes:

resource	yara_rule
behavioral1/memory/1516-55-0x0000000000950000-0x000000000097B000-memory.dmp	modiloader_stage2

C:\Users\Admin\AppData\Local\Temp\CJYUAEBL.exe
"C:\Users\Admin\AppData\Local\Temp\CJYUAEBL.exe"
1⤵
PID:1516

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1516-54-0x0000000076931000-0x0000000076933000-memory.dmp

Filesize
8KB

Download
memory/1516-55-0x0000000000950000-0x000000000097B000-memory.dmp

Filesize
172KB

Download