modiloader | 1b7b82e7a0b9e281efd1e04e989e02b71ffda8b3e347e7da396f317d795f0bcf | Triage

Submit
Reports

Overview

overview

Static

static

1

1840220197..._F.rtf

windows7-x64

1840220197..._F.rtf

windows10-2004-x64

1

Sharing

General

Target

1840220197_0000223948__F.doc
Size

13KB
Sample

240319-llgdhshc2t
MD5

1edcf5f787ca137fe762e46ec765e6ef
SHA1

0a10051c51b6eba3f18f055229021920121636e5
SHA256

1b7b82e7a0b9e281efd1e04e989e02b71ffda8b3e347e7da396f317d795f0bcf
SHA512

69f79542131721468decf88ae8ed3a9858216791bb8dacbdead3c79dc02f83ea89620cf6386710d4a7835ecf0dde0b58b748d0e1b243a88cef36bc3293516bd2
SSDEEP

384:TZ17c8JZFweYcPxugxmFEHNHuc8JCqVUrnyUyo8dfkA6PQMug+RZV:V17hJZSeVPxu7FEpN8JCqMy1okkAK7uj

Score

10^/10

modiloader trojan

Static task

static1

Behavioral task

behavioral1

Sample

1840220197_0000223948__F.rtf

Resource

win7-20240221-en

modiloader trojan

windows7-x64

22 signatures

150 seconds

Behavioral task

behavioral2

Sample

1840220197_0000223948__F.rtf

Resource

win10v2004-20240226-en

windows10-2004-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  
  1840220197_0000223948__F.doc
- Size
  
  13KB
- MD5
  
  1edcf5f787ca137fe762e46ec765e6ef
- SHA1
  
  0a10051c51b6eba3f18f055229021920121636e5
- SHA256
  
  1b7b82e7a0b9e281efd1e04e989e02b71ffda8b3e347e7da396f317d795f0bcf
- SHA512
  
  69f79542131721468decf88ae8ed3a9858216791bb8dacbdead3c79dc02f83ea89620cf6386710d4a7835ecf0dde0b58b748d0e1b243a88cef36bc3293516bd2
- SSDEEP
  
  384:TZ17c8JZFweYcPxugxmFEHNHuc8JCqVUrnyUyo8dfkA6PQMug+RZV:V17hJZSeVPxu7FEpN8JCqMy1okkAK7uj
Score

10^/10

modiloader trojan
- ModiLoader, DBatLoader
  ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
  trojan modiloader
- ModiLoader Second Stage
- Blocklisted process makes network request
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Exploitation for Client Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

modiloadertrojan

behavioral2

© 2018-2025

Terms | Privacy