Analysis
-
max time kernel
150s -
max time network
168s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
29/12/2023, 20:23
General
-
Target
02fe22ad34c3e5ff1da4987fbb662e59.exe
-
Size
685KB
-
MD5
02fe22ad34c3e5ff1da4987fbb662e59
-
SHA1
66470a525ff345d460ccc731bfbc3f962181b037
-
SHA256
1a7f7c0a64376d8a3a50108ba242b2d22a63311aca5f350a0b057428e3c1b30b
-
SHA512
fa7628d2a7ce06bea0c2d956c4c18102c5bc69cfdee6bb940b8d8154c7d66b2a1c008c7a5d4b675863982893c5394191b2ff86137e07fc8debe37ead0fe656dc
-
SSDEEP
12288:lJXAGTI10JLFxYQnb75ifKWX0PBSadRqtV7oQZLVT78:3wGc0JLIQxiyBsye1VTw
Score
10/10
Malware Config
Signatures
-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage 3 IoCs
-
Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\02fe22ad34c3e5ff1da4987fbb662e59.exe"C:\Users\Admin\AppData\Local\Temp\02fe22ad34c3e5ff1da4987fbb662e59.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3256 -s 5962⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 3256 -ip 32561⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
751KB
-
Filesize
4KB
-
Filesize
751KB
-
Filesize
751KB