Analysis
-
max time kernel
131s -
max time network
150s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
20/02/2024, 15:30
General
-
Target
Quotation .exe
-
Size
1.4MB
-
MD5
16067fe226bf2a138d3c11d08401a7b2
-
SHA1
4cca7cff6149ed01dbaf948c96a95a82e32dfda4
-
SHA256
7dd57a245f51f4fc78def21fff940c202bd6a4399f55604ed30b77f725135423
-
SHA512
0ca0885ecfab8e67ed09c96f3951b0fab17aff67a7b62e71cd5a2c9974589614cb8c582d2861ad44266e3ae4c29ef29a967158879df48a92d27264caa6034adf
-
SSDEEP
24576:BYpbarLJ08L0lk4A7YRHT6TLmqAEaQpM1tL3LW87:BYpuYk4BHVdEaQpM1tL3LJ7
Score
10/10
Malware Config
Signatures
-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Quotation .exe"C:\Users\Admin\AppData\Local\Temp\Quotation .exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
16.0MB
-
Filesize
16.0MB
-
Filesize
4KB
-
Filesize
1.5MB