Overview

overview

10

Static

static

3

SecuriteIn...99.exe

windows7-x64

10

SecuriteIn...99.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    138s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29-04-2023 17:28

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    SecuriteInfo.com.PUA.Tool.xIntruder.11398.17499.exe

  • Size

    259KB

  • MD5

    2a92762357ce57773ed0da0e3e4c1a17

  • SHA1

    6ecd67b8c82f27f6ab09d32a1c614153f28cef56

  • SHA256

    af7e4f5d0d5237f0543a8296b6b66ff31ce5096fcaf1cf0656cf91f2a9d3ae7c

  • SHA512

    005cc1ab9b7c90af9d4a72be32a1db3b0c979c632c2b8f1ecd6638be3bb3529adc9abe69af5a0b95a227835bd15a26770f39ec21895ecb3bfd7748869d419a76

  • SSDEEP

    6144:8qvDI8lq+vBkYIq6ClFlYDrQYllf7vpDW1bPR4z9lCdAtNYbl:8qA+JkYNvnYDrNZWIZlCdA

Score
10/10
modiloadertrojan

Malware Config

Signatures

  • ModiLoader, DBatLoader

    ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    trojanmodiloader
  • ModiLoader First Stage 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.PUA.Tool.xIntruder.11398.17499.exe
    "C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.PUA.Tool.xIntruder.11398.17499.exe"
    1⤵
      PID:5012

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/5012-133-0x0000000000400000-0x00000000004AB000-memory.dmp

      Filesize

      684KB

      Download

    • memory/5012-134-0x0000000000570000-0x0000000000571000-memory.dmp

      Filesize

      4KB

      Download

    • memory/5012-135-0x0000000000400000-0x00000000004AB000-memory.dmp

      Filesize

      684KB

      Download