Analysis

  • max time kernel
    131s
  • max time network
    147s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    20/01/2023, 09:36

General

  • Target

    U prilogu nova lista narudzbi.exe

  • Size

    740KB

  • MD5

    c03c09f867ffd16bb0af27e90d77d917

  • SHA1

    0db2adb82a5500ae122fe35986a76264715b5985

  • SHA256

    040a34e5884c29dd12452d342e344fe0d40f8dc1ea161d93c2a6c35b0a7da08b

  • SHA512

    9a0157b8ec6d4e45f38913dbbca8a951d24590e8831d731a39ddc7511c5833e5a77932c446641f4cff14e30801dd224904e3632c0fbdd842c24d2660e26ff9e7

  • SSDEEP

    12288:QJwpjlZUpP4dtZp1EgkuI1EXfVFxLBoOQziyMD78phts2O16a:QopZ9tT1wuI1EtLLxiiya78phm

Score
10/10

Malware Config

Signatures

  • ModiLoader, DBatLoader

    ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

  • ModiLoader Second Stage 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\U prilogu nova lista narudzbi.exe
    "C:\Users\Admin\AppData\Local\Temp\U prilogu nova lista narudzbi.exe"
    1⤵
      PID:580

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/580-54-0x0000000075931000-0x0000000075933000-memory.dmp

            Filesize

            8KB

          • memory/580-55-0x0000000000290000-0x00000000002BC000-memory.dmp

            Filesize

            176KB