Analysis
- max time kernel
121s - max time network
124s - platform
windows7_x64 - resource
win7-20231215-en - resource tags
- submitted
04/02/2024, 01:58
General
- Target 8deef4da1402f913706690291258eecf.exe
- Size 276KB
- Sample240204-cd3r4shdan
- SHA256 4f5d013191b516a923dcbad541dc9cf25698e52d8d8b9347e010551253bdfdc4
Score
10/10
Malware Config
Signatures
- ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
- ModiLoader Second Stage 2 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\8deef4da1402f913706690291258eecf.exe"C:\Users\Admin\AppData\Local\Temp\8deef4da1402f913706690291258eecf.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1944-1-0x0000000000400000-0x00000000004FB000-memory.dmp
memory/1944-0-0x0000000000400000-0x00000000004FB000-memory.dmp
memory/1944-2-0x0000000000230000-0x0000000000231000-memory.dmp
memory/1944-3-0x0000000000400000-0x00000000004FB000-memory.dmp
memory/1944-4-0x0000000000230000-0x0000000000231000-memory.dmp