Analysis
- max time kernel
132s - max time network
147s - platform
windows7_x64 - resource
win7-20220812-en - resource tags
- submitted
19/01/2023, 01:56
General
- Target from-isoE03304932.EXE.exe
- Size 701KB
- Sample230119-ccptvscc25
- SHA256 2e2a209e33d4b08ade19f874fab2aa15cf0bf2fb52fc002dd51c29b5f6a706a6
Score
10/10
Malware Config
Signatures
- ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
- ModiLoader Second Stage 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\from-isoE03304932.EXE.exe"C:\Users\Admin\AppData\Local\Temp\from-isoE03304932.EXE.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1788-54-0x0000000076201000-0x0000000076203000-memory.dmp
memory/1788-55-0x0000000002F80000-0x0000000002FAC000-memory.dmp