Analysis
-
max time kernel
147s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
14-06-2024 06:15
General
-
Target
fa1a6f2584a0b055043a7e732148b28542b043c79f1495115489069321470a9a.exe
-
Size
1.1MB
-
MD5
47b677fe87a552809d3d6f2e04f4f799
-
SHA1
58ec4c7ea0092c5c89138e48cb3bfbf7c4f0d90e
-
SHA256
fa1a6f2584a0b055043a7e732148b28542b043c79f1495115489069321470a9a
-
SHA512
87414f41d761a989845233f27c37068e571e2f29a52e2edf17e10a214994e0b40f1569d4e646b110fe2b9e33b70081e0178fb41cdb6fca338c0caa7652563f7b
-
SSDEEP
24576:xbWF0BGjRrxVo079sgiETeAXsiK/e9cvYLgc4mgTC:xHB4PTeAX4qMr3BTC
Score
10/10
Malware Config
Signatures
-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage 64 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\fa1a6f2584a0b055043a7e732148b28542b043c79f1495115489069321470a9a.exe"C:\Users\Admin\AppData\Local\Temp\fa1a6f2584a0b055043a7e732148b28542b043c79f1495115489069321470a9a.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/4016-0-0x0000000000700000-0x0000000000701000-memory.dmpFilesize
4KB
-
memory/4016-3-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-5-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-2-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-1-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-4-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-6-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-7-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-8-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-12-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-14-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-18-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-24-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-33-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-31-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-30-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-29-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-28-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-27-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-26-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-19-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-25-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-23-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-17-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-22-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-16-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-21-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-20-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-15-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-13-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-10-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-11-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-9-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-32-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-60-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-63-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-62-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-61-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-59-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-58-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-57-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-56-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-55-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-54-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-53-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-52-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-51-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-50-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-49-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-48-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-46-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-45-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-44-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-43-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-42-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-40-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-39-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-38-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-35-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-64-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-47-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-41-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-37-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-36-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-34-0x0000000002970000-0x0000000003970000-memory.dmpFilesize
16.0MB
-
memory/4016-371-0x0000000000700000-0x0000000000701000-memory.dmpFilesize
4KB