Overview

overview

10

Static

static

3

4338aca68f...5c.exe

windows7-x64

10

4338aca68f...5c.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    23s
  • max time network
    147s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    05/01/2024, 08:28

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    4338aca68fbaab846ec6345a7b85c15c.exe

  • Size

    908KB

  • MD5

    4338aca68fbaab846ec6345a7b85c15c

  • SHA1

    d8257c4ed2e6f744ea03dffe19344363a41c4fab

  • SHA256

    11f6a46954cdec78fec52771521926ff6917af81f79e3dc1198a38571b7d7519

  • SHA512

    c7f1e1224a155e361a872a0009b97d0f04df36d88e22fbcefeb568ab30d89147c9003afb030ba6434d8f8868f9680a54ac64cc0a0bf0707c197406f347287fc6

  • SSDEEP

    12288:8GBapj1mg3ShbnM19hbLgBN0gj6rIU4zcSo6nVwxZzrSYf3ifItMI5WF9:8GUmgShbnM19hlw3HpyVfTt/5e

Score
10/10
modiloadertrojan

Malware Config

Signatures

  • ModiLoader, DBatLoader

    ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    trojanmodiloader
  • ModiLoader Second Stage 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\4338aca68fbaab846ec6345a7b85c15c.exe
    "C:\Users\Admin\AppData\Local\Temp\4338aca68fbaab846ec6345a7b85c15c.exe"
    1⤵
      PID:2936

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC
            Filesize

            914B

            MD5

            e4a68ac854ac5242460afd72481b2a44

            SHA1

            df3c24f9bfd666761b268073fe06d1cc8d4f82a4

            SHA256

            cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

            SHA512

            5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

            Download Submit

          • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015
            Filesize

            13KB

            MD5

            838084de342bea0906d489e2fd41108c

            SHA1

            058b661d010ba29a4bb44f0483124f90f3d7b14d

            SHA256

            3b714327836e0e427e38685bd228917116407fca8a0c5bc2846baafe28643783

            SHA512

            490807d913fa9a889359fb93373b387611143f7778aa6d1b91d68ca80884f63df0a64231852e1a2560bf80b27be7633a8c2f03db7d118d3f7886f61cffed83e2

            Download Submit

          • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357
            Filesize

            1KB

            MD5

            a266bb7dcc38a562631361bbf61dd11b

            SHA1

            3b1efd3a66ea28b16697394703a72ca340a05bd5

            SHA256

            df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

            SHA512

            0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

            Download Submit

          • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC
            Filesize

            252B

            MD5

            45d445ebbe00f2ed74d55ffe3bf102b0

            SHA1

            ff34364ae8c72a1cb07abb0a80c9458d7ebb4507

            SHA256

            1b333bc4aecb78c058da4e5b4d597c1bf6fc95a704b434c8d63985e0aabbdccf

            SHA512

            4da630ceaf0b8402cf0db01f7d7df61fb2ff43d8c251d0b3f9efaa2836d8b1b503598caa1830536ab5107aa33b13352bb476ae40de49a385d435fe05d9848fe6

            Download Submit

          • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357
            Filesize

            242B

            MD5

            642f18ddc90a0bc46a437c8c1540352a

            SHA1

            9d444dbd94f5ff16f94e340a171b0a2aee3c3c9d

            SHA256

            e1796e11570c1015cef8fcbcbd75c082017ba4c0016114c5fd470cde1b1de5f6

            SHA512

            5e76c9e1d2ccfd20cc3c6911be340d6ad237b34fb58614f4758a2ce18b501677ec409a2f82d7db7863b0e8fd372bf2928488f7321aee57051f49ff4533f70af4

            Download Submit

          • C:\Users\Admin\AppData\Local\Temp\Tar764E.tmp
            Filesize

            9KB

            MD5

            36dd7e1886c2abd48eb6c4d08ba2a4ba

            SHA1

            4d07382641ee120fe26ec06a60d7fbdc15bf6c93

            SHA256

            4f5e01f3a2370cc3739ccdc10bb32eb1250504af2722eefb846b2de8213ddeab

            SHA512

            7b4443aaf9b72cb291ec134d799c833a2134f22e73ec62f1bb9425e78672f39e052d38b712c04f65e249225cc7d706a74eaa52e17b06ebbc2ce8dcfbe03436f1

            Download Submit

          • memory/2936-0-0x0000000000220000-0x0000000000221000-memory.dmp

            Filesize

            4KB

            Download

          • memory/2936-2-0x00000000002A0000-0x00000000002BB000-memory.dmp

            Filesize

            108KB

            Download

          • memory/2936-8-0x0000000000220000-0x0000000000221000-memory.dmp

            Filesize

            4KB

            Download

          • memory/2936-9-0x0000000000400000-0x00000000004E9000-memory.dmp

            Filesize

            932KB

            Download