Analysis
-
max time kernel
130s -
max time network
132s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
-
submitted
03-08-2023 13:45
General
-
Target
SecuriteInfo.com.Win32.DropperX-gen.19020.29434.exe
-
Size
1.1MB
-
MD5
4205e9fe92e166b7646469a84217cab3
-
SHA1
4f46cd8e752cc5937a32fefa01bcde8061eb5b73
-
SHA256
c2603fdcd24aba4629f3a8e3822f8c8ca84a97c89f163e05f9f5e1492da81036
-
SHA512
1ef6394cf11e62a284a830e42062959c6f330b25e84b8d2620396b50f44237bb069a5461781dc2a6cf0a4538feb460d84027a4de2985545bd7c85f6b6d7d9de5
-
SSDEEP
24576:+GBEKQCWCWF4bH7yT+YLWPP7/NCo9LboxSYVuDpa7Dfavrjnpi0JN:rDpd7/NCgLRYwNa7mvrjJ
Malware Config
Signatures
-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage 43 IoCs
-
Program crash 1 IoCs
-
Suspicious use of WriteProcessMemory 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.DropperX-gen.19020.29434.exe"C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.DropperX-gen.19020.29434.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1356 -s 7162⤵
- Program crash
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
372KB
-
Filesize
1.1MB
-
Filesize
372KB
-
Filesize
372KB
-
Filesize
372KB
-
Filesize
372KB
-
Filesize
372KB
-
Filesize
372KB
-
Filesize
372KB
-
Filesize
372KB
-
Filesize
372KB
-
Filesize
372KB
-
Filesize
372KB
-
Filesize
372KB
-
Filesize
372KB
-
Filesize
372KB
-
Filesize
372KB
-
Filesize
372KB
-
Filesize
372KB
-
Filesize
372KB
-
Filesize
372KB
-
Filesize
372KB
-
Filesize
372KB
-
Filesize
372KB
-
Filesize
372KB
-
Filesize
372KB
-
Filesize
372KB
-
Filesize
372KB
-
Filesize
372KB
-
Filesize
372KB
-
Filesize
372KB
-
Filesize
372KB
-
Filesize
372KB
-
Filesize
372KB
-
Filesize
372KB
-
Filesize
372KB
-
Filesize
372KB
-
Filesize
372KB
-
Filesize
372KB
-
Filesize
372KB
-
Filesize
372KB
-
Filesize
372KB
-
Filesize
372KB
-
Filesize
372KB