Analysis
-
max time kernel
119s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
03/02/2024, 17:33
Behavioral task
behavioral1
Sample
8cedc09cd9667f64805f0656db3bef9b.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
8cedc09cd9667f64805f0656db3bef9b.exe
Resource
win10v2004-20231215-en
2 signatures
150 seconds
General
-
Target
8cedc09cd9667f64805f0656db3bef9b.exe
-
Size
704KB
-
MD5
8cedc09cd9667f64805f0656db3bef9b
-
SHA1
75f78700139f0ad40bd14a6c16fdda7090342764
-
SHA256
c6fec70be917ef92d4be678df0c73100b7116e10cdcaf16b40c41e56b100fdba
-
SHA512
2009fd8bc672b5a71e940bcbc67180eeac067506256763dec2273919baf1aee8a7b92276b354d545346b9277d3fd797b63ac023f339210cb8d2290152acf982d
-
SSDEEP
12288:yugl095nSxHxzsFb+4pbzsUn7TFLgToUMypRv6LTIv8:Zy0XSxH9so4pHZN0yaCLTh
Score
10/10
Malware Config
Signatures
-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage 1 IoCs
resource yara_rule behavioral1/memory/1768-0-0x0000000000400000-0x00000000004C5000-memory.dmp modiloader_stage2