Overview

overview

10

Static

static

10

d0431768a6...cs.exe

windows7-x64

10

d0431768a6...cs.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    141s
  • max time network
    103s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19-05-2024 13:58

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    d0431768a6009910518c52fbbe55f700_NeikiAnalytics.exe

  • Size

    1.4MB

  • MD5

    d0431768a6009910518c52fbbe55f700

  • SHA1

    d9f1b8dce4d2bb6b8bd83066e3d2c1969b849c14

  • SHA256

    29c56103760206c97c0396ebdf8b6e759d7b4df8251601111f49e44574159273

  • SHA512

    cd3d420880e81fc0980bc8bdb19786d9713c5cbcb82287af9b1ee107a4626d08ecd8d2229971fcf96b000be6cbb6a21a4d0542cd3abb75009bd5a1922e61031f

  • SSDEEP

    12288:P3AzsgsK0MURR/FypkEOKE0Ezax+KyEzgTF/PrEKZpM8dtjywAkIJrOmrzsKZq0E:vAzQd57ypX+W8h/pQ8lAkIlOm/e66v

Score
10/10
modiloadertrojan

Malware Config

Signatures

  • ModiLoader, DBatLoader

    ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    trojanmodiloader
  • ModiLoader First Stage 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\d0431768a6009910518c52fbbe55f700_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\d0431768a6009910518c52fbbe55f700_NeikiAnalytics.exe"
    1⤵
      PID:3824

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3824-0-0x00000000021C0000-0x00000000021C1000-memory.dmp

      Filesize

      4KB

      Download

    • memory/3824-1-0x0000000000400000-0x0000000000563000-memory.dmp

      Filesize

      1.4MB

      Download

    • memory/3824-3-0x00000000021C0000-0x00000000021C1000-memory.dmp

      Filesize

      4KB

      Download