Analysis
-
max time kernel
140s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
24-09-2024 15:45
General
-
Target
研究生教务管理系统改进版 v2.2/setup.exe
-
Size
7.0MB
-
MD5
4783feeaea29e55ca7fef38f11919a61
-
SHA1
ba242414da3716b099f468a0a3af16394ebd4a97
-
SHA256
544e186a5b8df125a9db59fe8f5b1d0c688d6802f38128d3b3c8512d24d332c0
-
SHA512
fb16cdaf8a27f77508755a751dfa607bcf213da2d4a1dbc1c272a9329eaeba3e6cc011208ae501b80b68e217c7360e60d0e05a3c790458c15bd9f6dfd0b8ae92
-
SSDEEP
196608:K1KhqJka6oPZfHCUUnZxlIji9dxNzSrhFzxzROa2A:HoPpKIG9dHuhVx9
Score
10/10
Malware Config
Signatures
-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader First Stage 1 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\研究生教务管理系统改进版 v2.2\setup.exe"C:\Users\Admin\AppData\Local\Temp\研究生教务管理系统改进版 v2.2\setup.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
1.5MB