Overview

overview

10

Static

static

yeni sipar...si.exe

windows7-x64

10

yeni sipar...si.exe

windows10-2004-x64

10

Resubmissions

16-01-2023 09:37

230116-llrjgsgh6x 10

16-01-2023 09:32

230116-lhl5lagg9t 10

Analysis

  • max time kernel
    142s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    16-01-2023 09:32

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    yeni siparis listesi.exe

  • Size

    816KB

  • MD5

    6b0f23e56a98160ef61e1864227b0617

  • SHA1

    08b5e21bce19e406d182478a67bad6462b86a887

  • SHA256

    7f354681e9ec602aef4dcdedfc3eb05a8f1a777b3691ae4d9d58e78240d49fe8

  • SHA512

    961da7bd43e5fdf0f411fc4634614191be3e4e928d21e4a0c16d45b3f9dc7fed79079fc7bd3aff57883a77c48874b3e28ea8e590d57c6ac83f0a6c74fc63de40

  • SSDEEP

    12288:hvTirPykFC+EQpA7EOiidyVMmfP8DspvZFVphCF807ldv8gUwowEl52joHDL4wk:aPVFn/A7vsV/f6MvvV+maKN5RA

Score
10/10
modiloadertrojan

Malware Config

Signatures

  • ModiLoader, DBatLoader

    ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    trojanmodiloader
  • ModiLoader Second Stage 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\yeni siparis listesi.exe
    "C:\Users\Admin\AppData\Local\Temp\yeni siparis listesi.exe"
    1⤵
      PID:1516

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1516-54-0x0000000075BD1000-0x0000000075BD3000-memory.dmp
      Filesize

      8KB

      Download
    • memory/1516-55-0x0000000001EB0000-0x0000000001EDC000-memory.dmp
      Filesize

      176KB

      Download