Overview

overview

10

Static

static

1

Attached P...ce.exe

windows7-x64

10

Attached P...ce.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    141s
  • max time network
    152s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    03-02-2023 16:50

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Attached Proforma Invoice.exe

  • Size

    678KB

  • MD5

    9f0e000d75cf201d56f68e51a0c43cc5

  • SHA1

    54d6592876e9261109fbd60ae2e078f475f74f1e

  • SHA256

    02033ee5f18dc5c14cca3e808111693ff1b41d8d705268ae55e86251fe6bcc8b

  • SHA512

    fe72606ae529ef5522b7681b66118c516c6f3ea55844441196f1143ab684dba5daee89dfcdf957b291a16ee862d575accdfe1b45837d4ac01645da894492f64e

  • SSDEEP

    12288:+J8P4O2utBLvuQ4ZNn1AjnJzQFftOZCcgy:mIWutBLm/NnoJzQFW

Score
10/10
modiloadertrojan

Malware Config

Signatures

  • ModiLoader, DBatLoader

    ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    trojanmodiloader
  • ModiLoader Second Stage 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Attached Proforma Invoice.exe
    "C:\Users\Admin\AppData\Local\Temp\Attached Proforma Invoice.exe"
    1⤵
      PID:752

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/752-54-0x0000000075841000-0x0000000075843000-memory.dmp
      Filesize

      8KB

      Download
    • memory/752-55-0x00000000003C0000-0x00000000003EC000-memory.dmp
      Filesize

      176KB

      Download