Analysis
-
max time kernel
134s -
max time network
168s -
platform
windows10-2004_x64 -
resource
win10v2004-20231127-en -
resource tags
-
submitted
01-12-2023 15:12
General
-
Target
a8419b40b08010ac4280ed6af48ca614ad25d472da403d6f6acaaaecc62e73aa.exe
-
Size
3.4MB
-
MD5
74719c40fdcdb7bfb77249c4355ad998
-
SHA1
912479b013c2d1aac03ca17e47be2e9003a868ed
-
SHA256
a8419b40b08010ac4280ed6af48ca614ad25d472da403d6f6acaaaecc62e73aa
-
SHA512
3d19596ddba8482ee25c343420b25b0d1e5303d2f3df5064c9fd34dba79c0a1e6c1d94f4afd37d7de6f743924dd0cb226d3c095e0ca2503ea30cdba63746b1c1
-
SSDEEP
98304:tAT62/yA5J2XJuD25V7RE9C3mUN3eMfth+1MWw2DPS5wvViBhwKtaOkaC3p:U4PXJuKzROweSYbxDKoawKQTaC
Score
10/10
Malware Config
Signatures
-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader First Stage 1 IoCs
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
Processes
-
C:\Users\Admin\AppData\Local\Temp\a8419b40b08010ac4280ed6af48ca614ad25d472da403d6f6acaaaecc62e73aa.exe"C:\Users\Admin\AppData\Local\Temp\a8419b40b08010ac4280ed6af48ca614ad25d472da403d6f6acaaaecc62e73aa.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
5.2MB
-
Filesize
4KB
-
Filesize
5.2MB