Analysis
-
max time kernel
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
30/12/2023, 06:02
General
-
Target
1093c7d93083b996901d5c05da801238.exe
-
Size
750KB
-
MD5
1093c7d93083b996901d5c05da801238
-
SHA1
a6f8f563e92aa0a98ce6bfc6cfb56e836aa1e1f8
-
SHA256
8627ca726bef8bc8b46eb2672a89243cb76b1c2dde2128f1a9c1902ad2c4ad50
-
SHA512
8056e3e5a820607f59790cb4d9880d435e8b3284f89ebfe2ce066da0d8af508cd4dd0990d516357c782115b5dbb7ff138fa9c5eabd88cee61bc81961e4ab5655
-
SSDEEP
12288:jlxzRlQBM4jakuD83h25zoA4wqvmq1D/8nfF3Z4mxxlmBcxi98rwwKE1ixZy0:jlK1ul8AoA4w81DkfQmXLxiSKE1mF
Score
10/10
Malware Config
Signatures
-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage 5 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\1093c7d93083b996901d5c05da801238.exe"C:\Users\Admin\AppData\Local\Temp\1093c7d93083b996901d5c05da801238.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of WriteProcessMemory
-
C:\program files\internet explorer\IEXPLORE.EXE"C:\program files\internet explorer\IEXPLORE.EXE"2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.2MB
-
Filesize
336KB
-
Filesize
1.2MB
-
Filesize
4KB
-
Filesize
1.2MB
-
Filesize
4KB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
4KB
-
Filesize
336KB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
1.2MB