Analysis
-
max time kernel
0s -
max time network
149s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
31/12/2023, 13:14
General
-
Target
036244e73f392c54c6c70107dd6563a3.exe
-
Size
720KB
-
MD5
036244e73f392c54c6c70107dd6563a3
-
SHA1
6ce030303b1490b7c4dcae5ebe1787951a15ea06
-
SHA256
174721f9d5861a0415a3128debaa2147ef10dab5552454b5da3e2ae7b01b8033
-
SHA512
dfe0de63efe212f4a4e7b2edc9357e059b23c421c0b31344cd327e4fa6e7f89e03bdd13acdbcc71e9658c107e2c241eda968ae0dc8aff60bc3ccb9e71ef7d568
-
SSDEEP
12288:0t31oSg+d+coajNNQGJ7dAjsVE6wpNIyDG:0tpd+coaRglpN6
Malware Config
Signatures
-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage 10 IoCs
-
Checks BIOS information in registry 2 TTPs 2 IoCs
BIOS information is often read in order to detect sandboxing environments.
-
UPX packed file 15 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Modifies registry class 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\036244e73f392c54c6c70107dd6563a3.exe"C:\Users\Admin\AppData\Local\Temp\036244e73f392c54c6c70107dd6563a3.exe"1⤵
- Checks BIOS information in registry
- Modifies registry class
-
C:\Windows\mstwain32.exe"C:\Windows\mstwain32.exe"2⤵
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
720KB
MD5036244e73f392c54c6c70107dd6563a3
SHA16ce030303b1490b7c4dcae5ebe1787951a15ea06
SHA256174721f9d5861a0415a3128debaa2147ef10dab5552454b5da3e2ae7b01b8033
SHA512dfe0de63efe212f4a4e7b2edc9357e059b23c421c0b31344cd327e4fa6e7f89e03bdd13acdbcc71e9658c107e2c241eda968ae0dc8aff60bc3ccb9e71ef7d568
-
Filesize
382KB
MD5c6e22417350b3f6f8f05d28ac50c6adb
SHA1080d389936f5310685974dbf46ae5f33b54ab6f8
SHA2563b784a0b9705e1806f40cd1cfcf0f1b5052daefe8e56593ca7e03dfbdeaa88b3
SHA512258fccc1477f7f9933e970d601d0c1421fd56eb03562a33b5d60fa9c1053033688db52626198ffcbd3387473bbbddc6cef1ce6bfe1367f079bcb7eacb603faff
-
Filesize
92KB
MD5d870979e12647ff636b19f5652bf4de9
SHA12559e6962046c48bbcabfc2b8c5e86c71b50c1f9
SHA256d25491b0f7df7df562b18d6aa6bd1063401683333ae1d4d5b2f0066555801db3
SHA512404927e5e4c0fa57d6c604a036385024c75a15dfd8915a042823eb88673e6a42a12adb7a90a0ca430da44bcb38fd5f6de23fa1c46dd971157d804f9c8ae16aa9
-
Filesize
552KB
-
Filesize
64KB
-
Filesize
1.1MB
-
Filesize
552KB
-
Filesize
552KB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
552KB
-
Filesize
1.1MB
-
Filesize
4KB
-
Filesize
1.1MB
-
Filesize
552KB
-
Filesize
4KB
-
Filesize
960KB
-
Filesize
80KB
-
Filesize
56KB
-
Filesize
552KB
-
Filesize
552KB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
76KB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB