Overview

overview

10

Static

static

3

af7e4f5d0d...7c.exe

windows7-x64

10

af7e4f5d0d...7c.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    21s
  • max time network
    31s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    01-05-2023 01:16

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    af7e4f5d0d5237f0543a8296b6b66ff31ce5096fcaf1cf0656cf91f2a9d3ae7c.exe

  • Size

    259KB

  • MD5

    2a92762357ce57773ed0da0e3e4c1a17

  • SHA1

    6ecd67b8c82f27f6ab09d32a1c614153f28cef56

  • SHA256

    af7e4f5d0d5237f0543a8296b6b66ff31ce5096fcaf1cf0656cf91f2a9d3ae7c

  • SHA512

    005cc1ab9b7c90af9d4a72be32a1db3b0c979c632c2b8f1ecd6638be3bb3529adc9abe69af5a0b95a227835bd15a26770f39ec21895ecb3bfd7748869d419a76

  • SSDEEP

    6144:8qvDI8lq+vBkYIq6ClFlYDrQYllf7vpDW1bPR4z9lCdAtNYbl:8qA+JkYNvnYDrNZWIZlCdA

Score
10/10
modiloadertrojan

Malware Config

Signatures

  • ModiLoader, DBatLoader

    ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    trojanmodiloader
  • ModiLoader First Stage 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\af7e4f5d0d5237f0543a8296b6b66ff31ce5096fcaf1cf0656cf91f2a9d3ae7c.exe
    "C:\Users\Admin\AppData\Local\Temp\af7e4f5d0d5237f0543a8296b6b66ff31ce5096fcaf1cf0656cf91f2a9d3ae7c.exe"
    1⤵
      PID:1748

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1748-55-0x0000000000220000-0x0000000000221000-memory.dmp

      Filesize

      4KB

      Download

    • memory/1748-54-0x0000000000400000-0x00000000004AB000-memory.dmp

      Filesize

      684KB

      Download

    • memory/1748-57-0x0000000000400000-0x00000000004AB000-memory.dmp

      Filesize

      684KB

      Download