modiloader | 765a3ee635dac9768667346592434404a355fc6c631d85bbc88fe43857820416

Analysis

max time kernel
145s
max time network
162s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
07/04/2024, 19:06

Target
e5a4eacf9df6a96d068520dafc94d7b5_JaffaCakes118.exe
Size 10KB
Sample240407-xr6fdacb76
SHA256 765a3ee635dac9768667346592434404a355fc6c631d85bbc88fe43857820416
MD5 e5a4eacf9df6a96d068520dafc94d7b5
SHA1 d9f666021c2148648f5f0eda138a6ac26777f9b4
SHA512 b4fe4ab4c748e1a42a9f4a25581441a9e0341ab3781b9549f4ba15cbc50cbcd2b0e9878b7532a7ebb57bdef13e85fc6102652f4e989d0bfef9d98028e97f7d1a
SSDEEP 192:6mPdGmyd86YfBHAHh7d8NKwr52876nfq2UxXqqjOTj5nTP3N:JPdGmMYfcs6nfLUx9OT1TP3N
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

modiloader trojan

ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
trojan modiloader

ModiLoader Second Stage 1 IoCs

resource	yara_rule
behavioral2/memory/2600-1-0x0000000000010000-0x00000000000ED000-memory.dmp	modiloader_stage2

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2600 wrote to memory of 2152	2600	e5a4eacf9df6a96d068520dafc94d7b5_JaffaCakes118.exe	87
PID 2600 wrote to memory of 2152	2600	e5a4eacf9df6a96d068520dafc94d7b5_JaffaCakes118.exe	87
PID 2600 wrote to memory of 2152	2600	e5a4eacf9df6a96d068520dafc94d7b5_JaffaCakes118.exe	87

C:\Users\Admin\AppData\Local\Temp\e5a4eacf9df6a96d068520dafc94d7b5_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\e5a4eacf9df6a96d068520dafc94d7b5_JaffaCakes118.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2600
- C:\Users\Admin\AppData\Local\Temp\e5a4eacf9df6a96d068520dafc94d7b5_JaffaCakes118.exe
  C:\Users\Admin\AppData\Local\Temp\e5a4eacf9df6a96d068520dafc94d7b5_JaffaCakes118.exe
  2⤵
  PID:2152

memory/2600-0-0x0000000000010000-0x00000000000ED000-memory.dmp

Download

memory/2600-1-0x0000000000010000-0x00000000000ED000-memory.dmp

Download