Analysis
-
max time kernel
93s -
max time network
140s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
04/09/2024, 00:42
General
-
Target
bdaabf727d916f8eb4147010e934f3b0858b3835e98b2c82ba48370d41ec2f6f.exe
-
Size
14.8MB
-
MD5
19e7bfae278f4946b521e107c31c1bd2
-
SHA1
b8723626e01a8a0e3128b0a7ec381f3e791e06f8
-
SHA256
bdaabf727d916f8eb4147010e934f3b0858b3835e98b2c82ba48370d41ec2f6f
-
SHA512
112945a21c27c5caa98bef0a7238133b20821b8070e55c5ba7854b55d99391f5c4f22c80742c4baab32771eda26b7523360a28d8a21598845084ac90dfbac396
-
SSDEEP
393216:/DaDC3oDM6C2zRZ9m4xwUrwvLG8x7ssnXOTCGpL:w3oKRZPlx
Score
10/10
Malware Config
Signatures
-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader First Stage 2 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 9 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\bdaabf727d916f8eb4147010e934f3b0858b3835e98b2c82ba48370d41ec2f6f.exe"C:\Users\Admin\AppData\Local\Temp\bdaabf727d916f8eb4147010e934f3b0858b3835e98b2c82ba48370d41ec2f6f.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
21.3MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
21.3MB