Analysis
-
max time kernel
140s -
max time network
124s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
-
submitted
20-06-2024 09:43
General
-
Target
Perl Editor/Breakpnt.exe
-
Size
414KB
-
MD5
1519f2664204424acd3fe48ead1ca26a
-
SHA1
de41c62355dadc564d80d2931d5e2d02c3cff4f9
-
SHA256
1300017580ecf5911accfb865f658f76facfa869a42c0b542e6c04931e02e431
-
SHA512
e3fed2e946c301caa974f15ac16e75d6873f1fbff2d565dc2769eb122c0f67ae42175719eb7a396a3cad0cfac800506ee347e7dfd98d69de6a8b36b9e202eb67
-
SSDEEP
12288:spCOyva7D/JcvzSKvgDhCGkW1meyUGpnYFPipu:s0wzOBvKhaW1HGlYME
Score
10/10
Malware Config
Signatures
-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader First Stage 1 IoCs
-
Modifies registry class 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Perl Editor\Breakpnt.exe"C:\Users\Admin\AppData\Local\Temp\Perl Editor\Breakpnt.exe"1⤵
- Modifies registry class
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.0MB
-
Filesize
8KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
1.0MB