Analysis
-
max time kernel
142s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
28/01/2024, 18:11
General
-
Target
192.168.0.201_ClientSetup.exe
-
Size
4.9MB
-
MD5
b1d5c9b7445e0472fdaf6be845045ec3
-
SHA1
0448450f63a21f3c96c50ea6c9b63d1f7870a3c8
-
SHA256
e8b66676518ff84b417a25942ce398003177f6863440f990c2f98be179dc08df
-
SHA512
9e5c59e4cd440b68f2c258cac947aa0c968aa088246d8bae0b699a4fe60e500eb10bfabb0d943b536205acb46d592484223bbc92fd24222a9701ca8be129c35c
-
SSDEEP
98304:LJEkkuDuQ2VHSu28JwhD+Y//hqA3YJc1qjOF5pI/O3wmB3w:LJE9zVHSAAD+Y/PI61qjdkhw
Score
10/10
Malware Config
Signatures
-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader First Stage 2 IoCs
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
Processes
-
C:\Users\Admin\AppData\Local\Temp\192.168.0.201_ClientSetup.exe"C:\Users\Admin\AppData\Local\Temp\192.168.0.201_ClientSetup.exe"1⤵
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
11.3MB
-
Filesize
336KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
8KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
11.3MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
11.3MB
-
Filesize
336KB
-
Filesize
4KB