Overview
overview
10Static
static
1008e454a691...23.zip
windows7-x64
108e454a691...23.zip
windows10-2004-x64
1Client.exe
windows7-x64
10Client.exe
windows10-2004-x64
10Editor.exe
windows7-x64
10Editor.exe
windows10-2004-x64
10OptixPRO T...an.pdf
windows7-x64
1OptixPRO T...an.pdf
windows10-2004-x64
1Server.exe
windows7-x64
10Server.exe
windows10-2004-x64
10README.vbs
windows7-x64
1README.vbs
windows10-2004-x64
1setup.ps1
windows7-x64
1setup.ps1
windows10-2004-x64
1subseven.ps1
windows7-x64
1subseven.ps1
windows10-2004-x64
1Analysis
-
max time kernel
151s -
max time network
164s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
24-12-2023 17:39
Behavioral task
behavioral1
Sample
08e454a691a4836663a117c9c43f6323.zip
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
08e454a691a4836663a117c9c43f6323.zip
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
Client.exe
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
Client.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
Editor.exe
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
Editor.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
OptixPRO Tutorial german.pdf
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
OptixPRO Tutorial german.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
Server.exe
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
Server.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
README.vbs
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
README.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral13
Sample
setup.ps1
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
setup.ps1
Resource
win10v2004-20231222-en
Behavioral task
behavioral15
Sample
subseven.ps1
Resource
win7-20231215-en
Behavioral task
behavioral16
Sample
subseven.ps1
Resource
win10v2004-20231222-en
General
-
Target
Editor.exe
-
Size
359KB
-
MD5
f7d7317baf021642c824b99cd1dea331
-
SHA1
6e1c9f3f040cbd8515a4be0188ce77f921d9aea5
-
SHA256
c2fe95570407c7eab0933dfedc4eba9a66e0b3a8b68aaadf4d10b615bb44e149
-
SHA512
46a97f1d4e7ca0176e726cbeaee4a585301ad4feafc664e7ce1554f74c6b89e3b3dbab37b3df520f9814e09cdc2a23e40803c077b28eb668402c5d4096c54e49
-
SSDEEP
6144:UVrWRxPlw/cZ2GU1ZPWR9SGbu6v+slgVRkPckdDynX8uqQ7Qt:UVrWNSCjIWR9SmLIRkPRd+Pk
Malware Config
Signatures
-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage 1 IoCs
resource yara_rule behavioral6/memory/4784-2-0x0000000000400000-0x0000000000511000-memory.dmp modiloader_stage2 -
resource yara_rule behavioral6/memory/4784-0-0x0000000000400000-0x0000000000511000-memory.dmp upx behavioral6/memory/4784-2-0x0000000000400000-0x0000000000511000-memory.dmp upx