Analysis
-
max time kernel
141s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
31-05-2024 04:27
General
-
Target
e72d6f43bd66e33552dfb0371435ecb5934151c06391c9891249b4d90e92b9bb.exe
-
Size
3.7MB
-
MD5
e325e33696056f51e536df504637b600
-
SHA1
28a5a15a5da76f89acf922bb2e450767c36954ab
-
SHA256
e72d6f43bd66e33552dfb0371435ecb5934151c06391c9891249b4d90e92b9bb
-
SHA512
13f9fc204acc3aad9543ae52aec51152a840862ad2fd5521d2630e371106238a0ac1b736b22a8fa7b48602eed6a13f92b0536585b25485a7a5a96c081cf1ec8a
-
SSDEEP
98304:eBUrWOjePzbQdI5+SZ3OADrYCFP1vSBT:eCrlePz8A++3dYMdSB
Score
10/10
Malware Config
Signatures
-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader First Stage 1 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of SetWindowsHookEx 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\e72d6f43bd66e33552dfb0371435ecb5934151c06391c9891249b4d90e92b9bb.exe"C:\Users\Admin\AppData\Local\Temp\e72d6f43bd66e33552dfb0371435ecb5934151c06391c9891249b4d90e92b9bb.exe"1⤵
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
3.8MB
-
Filesize
4KB