Analysis
-
max time kernel
94s -
max time network
96s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
03/09/2024, 09:35
General
-
Target
0a2f47c85df97ec86059e0952c4b1290N.exe
-
Size
70KB
-
MD5
0a2f47c85df97ec86059e0952c4b1290
-
SHA1
01bc6b7a8ee1529d53b6140bfab31b8b68c9dce6
-
SHA256
267e244811f752479158b9e9a3e793a567cd560daa82eb14347961c0dd8240b1
-
SHA512
318ffebbf2549aceee491d1026b1023fd2c20c374b65ad56bb3ae0adc3f916fc65e124ec8e4ac3af4ed78752c94e0b4e810267d5cd6227c635f6e911713780a3
-
SSDEEP
768:wycqOQ0bwMK2M3fQdS8Pfymg0M9EQfRg59xi9ZUb7MiWxI:HcqOQbB3fQ48Pfymg0yxpg7xKUHV
Score
10/10
Malware Config
Signatures
-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\0a2f47c85df97ec86059e0952c4b1290N.exe"C:\Users\Admin\AppData\Local\Temp\0a2f47c85df97ec86059e0952c4b1290N.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
80KB