Analysis
-
max time kernel
140s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
13-12-2024 00:22
General
-
Target
LiQQ/LiQQ.exe
-
Size
875KB
-
MD5
4e12fffe7cc173e934c5b47ce6c55b51
-
SHA1
15a5e88deaa16d276eccdf95386c8b3df2b9e15c
-
SHA256
e8e45f1a8b9bda820ba5a1478c5685c3a66164e87ac053eddcd2b2450e88a188
-
SHA512
6009431c0c28f5e2d00bff1dd7bae268a66f4bd46f9bd8e59f9ac927b75bc4dfb8293e5356d772d55bf6bf346c6698cab6598145895aa25765500196e8f903b3
-
SSDEEP
12288:a7ZqtLknJc3svE/LG3AtkGZBneYc6d0H31i40c0XsHoYfnaY3xJPWty4D2ZJe1bC:eZaQ+3svD3bGndC08dxJ+GL/V
Score
10/10
Malware Config
Signatures
-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
Modiloader family
-
ModiLoader Second Stage 2 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\LiQQ\LiQQ.exe"C:\Users\Admin\AppData\Local\Temp\LiQQ\LiQQ.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
900KB
-
Filesize
900KB