Analysis
-
max time kernel
149s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
19-01-2025 14:44
General
-
Target
anituner.exe
-
Size
612KB
-
MD5
2994750df10b747f75dbbf70676eb37b
-
SHA1
fc73c5af53f7cd51180174e4ba37e7abd82420c3
-
SHA256
b6b2dbc30ee0c4d78c79fd50080adc246993671495aaa12b2be97de193fa77c4
-
SHA512
e3008c67dceba5d065e812f5bd10ae9ac444564b7c9066c7981cae03f4c7cd864454689c466cf77f7531dbe141dda2370b8f32c73f61b1f6bff815f010eea366
-
SSDEEP
12288:Rsgpg50CHj8UEIuXfpA10D5e5j5vT0moh4W2hiH3ktGcqas8cGwmgfNf4i0a:pD5H5yT0moqW2MdcqalLeN1
Score
10/10
Malware Config
Signatures
-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
Modiloader family
-
ModiLoader First Stage 1 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\anituner.exe"C:\Users\Admin\AppData\Local\Temp\anituner.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.0MB
-
Filesize
8KB
-
Filesize
4KB
-
Filesize
2.0MB
-
Filesize
8KB
-
Filesize
4KB