Analysis
-
max time kernel
143s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20231020-en -
resource tags
-
submitted
01-12-2023 15:18
General
-
Target
69d49e2e9cb21bebe0b8dfb1d6bb24eaac9a350590cae75b4705d5f9e9ec8c34.exe
-
Size
4.1MB
-
MD5
eb96525068c763142b2316a01e8f3ca6
-
SHA1
81310c8616f80d8d3510d597c2173344bfc1c18d
-
SHA256
69d49e2e9cb21bebe0b8dfb1d6bb24eaac9a350590cae75b4705d5f9e9ec8c34
-
SHA512
e167642c76f50c300d3b4616995662f093a9758c7dd1c7a886b6d43e90d9e06ff7fce5cdea3d7284f3dd2dec58113bb2bec6e2a03c99f4770990559187d9af58
-
SSDEEP
98304:7HT+hqkR6opYY5M5VbNPVnSj6+1g/2PsNJuF53NMZid7:7H6IkR6K9q/Sj6+KUzMQ
Score
10/10
Malware Config
Signatures
-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader First Stage 2 IoCs
-
UPX packed file 3 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of SetWindowsHookEx 6 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\69d49e2e9cb21bebe0b8dfb1d6bb24eaac9a350590cae75b4705d5f9e9ec8c34.exe"C:\Users\Admin\AppData\Local\Temp\69d49e2e9cb21bebe0b8dfb1d6bb24eaac9a350590cae75b4705d5f9e9ec8c34.exe"1⤵
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
17.1MB
-
Filesize
4KB
-
Filesize
17.1MB
-
Filesize
17.1MB
-
Filesize
4KB