Analysis
-
max time kernel
28s -
max time network
33s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
07-05-2023 00:32
General
-
Target
af7e4f5d0d5237f0543a8296b6b66ff31ce5096fcaf1cf0656cf91f2a9d3ae7c.exe
-
Size
259KB
-
MD5
2a92762357ce57773ed0da0e3e4c1a17
-
SHA1
6ecd67b8c82f27f6ab09d32a1c614153f28cef56
-
SHA256
af7e4f5d0d5237f0543a8296b6b66ff31ce5096fcaf1cf0656cf91f2a9d3ae7c
-
SHA512
005cc1ab9b7c90af9d4a72be32a1db3b0c979c632c2b8f1ecd6638be3bb3529adc9abe69af5a0b95a227835bd15a26770f39ec21895ecb3bfd7748869d419a76
-
SSDEEP
6144:8qvDI8lq+vBkYIq6ClFlYDrQYllf7vpDW1bPR4z9lCdAtNYbl:8qA+JkYNvnYDrNZWIZlCdA
Score
10/10
Malware Config
Signatures
-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader First Stage 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\af7e4f5d0d5237f0543a8296b6b66ff31ce5096fcaf1cf0656cf91f2a9d3ae7c.exe"C:\Users\Admin\AppData\Local\Temp\af7e4f5d0d5237f0543a8296b6b66ff31ce5096fcaf1cf0656cf91f2a9d3ae7c.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
684KB
-
Filesize
4KB
-
Filesize
684KB