Analysis
-
max time kernel
121s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
27/02/2025, 15:31
General
-
Target
QUOTE.exe
-
Size
1.8MB
-
MD5
a66beadb024e6588013951dcc580c6e3
-
SHA1
0c2877b14f6cec469b75a4801f2fa8eb06d44027
-
SHA256
dc871eeb7a1c0b24f72c6f0784522d7e354dec9ef137287ebfaea74dd1776a7d
-
SHA512
f6ff571e98113f65e3b4c7a97be86e7586399edbb224921eab46a609f752277e3e02d8eed5b97aaebf6a712bac9d03d0be116917b1340ea623d50809a8be133b
-
SSDEEP
49152:9W7OQpZsNmopb3wuzfiG+iGGCCCCv9rmlf3e9uQ1Prsw:9OppZs08b3wujiG+iGGCCCCvy3e9f1TH
Score
10/10
Malware Config
Signatures
-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
Modiloader family
-
ModiLoader Second Stage 1 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\QUOTE.exe"C:\Users\Admin\AppData\Local\Temp\QUOTE.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
1.8MB
-
Filesize
16.0MB