modiloader | e25f350170fe141ed643b1b37053731a60313d8f35c3906558b9212d2cf89c20

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
20-06-2024 02:46

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

02275e3937342d99d86e205cfdf16d6d_JaffaCakes118.exe
Size

615KB
MD5

02275e3937342d99d86e205cfdf16d6d
SHA1

88f81db05aa516e3972a2e12b38d6b288fd43ee6
SHA256

e25f350170fe141ed643b1b37053731a60313d8f35c3906558b9212d2cf89c20
SHA512

c18a28d42f21b18ea6e9dd1c93674d4ae4947e9703c9b0ca3b91629619b77a3877a477264257f9aa3c60d3f074b02318b4c0ddd79c7af0171f716a413cc94a6e
SSDEEP

12288:lrngdXcwBEoutn4EbgUw5pUhRLTfgrvJutF3Z4mxx8DqVTVOC+:lrngRcULuthk8tT4rgtQmXbVTz+

Score

10^/10

modiloader trojan

Malware Config

Signatures

ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
trojan modiloader

ModiLoader Second Stage 2 IoCs

Processes:

resource	yara_rule
behavioral1/memory/1132-77-0x0000000000400000-0x00000000005B2000-memory.dmp	modiloader_stage2
behavioral1/memory/1132-80-0x0000000000400000-0x00000000005B2000-memory.dmp	modiloader_stage2

C:\Users\Admin\AppData\Local\Temp\02275e3937342d99d86e205cfdf16d6d_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\02275e3937342d99d86e205cfdf16d6d_JaffaCakes118.exe"
1⤵
PID:1132

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1132-1-0x0000000000350000-0x00000000003A4000-memory.dmp

Filesize
336KB

Download
memory/1132-0-0x0000000000400000-0x00000000005B2000-memory.dmp

Filesize
1.7MB

Download
memory/1132-11-0x00000000032E0000-0x00000000032E1000-memory.dmp

Filesize
4KB

Download
memory/1132-10-0x00000000005C0000-0x00000000005C1000-memory.dmp

Filesize
4KB

Download
memory/1132-9-0x0000000000630000-0x0000000000631000-memory.dmp

Filesize
4KB

Download
memory/1132-8-0x0000000000600000-0x0000000000601000-memory.dmp

Filesize
4KB

Download
memory/1132-7-0x0000000000610000-0x0000000000611000-memory.dmp

Filesize
4KB

Download
memory/1132-6-0x00000000003E0000-0x00000000003E1000-memory.dmp

Filesize
4KB

Download
memory/1132-5-0x00000000003F0000-0x00000000003F1000-memory.dmp

Filesize
4KB

Download
memory/1132-4-0x0000000000620000-0x0000000000621000-memory.dmp

Filesize
4KB

Download
memory/1132-3-0x00000000005D0000-0x00000000005D1000-memory.dmp

Filesize
4KB

Download
memory/1132-76-0x00000000032D0000-0x00000000032D1000-memory.dmp

Filesize
4KB

Download
memory/1132-75-0x00000000032D0000-0x00000000032D1000-memory.dmp

Filesize
4KB

Download
memory/1132-74-0x00000000032D0000-0x00000000032D1000-memory.dmp

Filesize
4KB

Download
memory/1132-73-0x00000000032D0000-0x00000000032D1000-memory.dmp

Filesize
4KB

Download
memory/1132-72-0x00000000032D0000-0x00000000032D1000-memory.dmp

Filesize
4KB

Download
memory/1132-71-0x00000000032D0000-0x00000000032D1000-memory.dmp

Filesize
4KB

Download
memory/1132-70-0x00000000032D0000-0x00000000032D1000-memory.dmp

Filesize
4KB

Download
memory/1132-69-0x00000000032D0000-0x00000000032D1000-memory.dmp

Filesize
4KB

Download
memory/1132-68-0x00000000032D0000-0x00000000032D1000-memory.dmp

Filesize
4KB

Download
memory/1132-18-0x00000000032D0000-0x00000000032D1000-memory.dmp

Filesize
4KB

Download
memory/1132-67-0x00000000032D0000-0x00000000032D1000-memory.dmp

Filesize
4KB

Download
memory/1132-66-0x00000000032D0000-0x00000000032D1000-memory.dmp

Filesize
4KB

Download
memory/1132-65-0x00000000032D0000-0x00000000032D1000-memory.dmp

Filesize
4KB

Download
memory/1132-64-0x00000000032D0000-0x00000000032D1000-memory.dmp

Filesize
4KB

Download
memory/1132-63-0x00000000032D0000-0x00000000032D1000-memory.dmp

Filesize
4KB

Download
memory/1132-62-0x00000000032D0000-0x00000000032D1000-memory.dmp

Filesize
4KB

Download
memory/1132-61-0x00000000032D0000-0x00000000032D1000-memory.dmp

Filesize
4KB

Download
memory/1132-60-0x00000000032D0000-0x00000000032D1000-memory.dmp

Filesize
4KB

Download
memory/1132-59-0x00000000032D0000-0x00000000032D1000-memory.dmp

Filesize
4KB

Download
memory/1132-58-0x00000000032D0000-0x00000000032D1000-memory.dmp

Filesize
4KB

Download
memory/1132-57-0x00000000032D0000-0x00000000032D1000-memory.dmp

Filesize
4KB

Download
memory/1132-56-0x00000000032D0000-0x00000000032D1000-memory.dmp

Filesize
4KB

Download
memory/1132-55-0x00000000032D0000-0x00000000032D1000-memory.dmp

Filesize
4KB

Download
memory/1132-54-0x00000000032D0000-0x00000000032D1000-memory.dmp

Filesize
4KB

Download
memory/1132-53-0x00000000032D0000-0x00000000032D1000-memory.dmp

Filesize
4KB

Download
memory/1132-52-0x00000000032D0000-0x00000000032D1000-memory.dmp

Filesize
4KB

Download
memory/1132-51-0x00000000032D0000-0x00000000032D1000-memory.dmp

Filesize
4KB

Download
memory/1132-50-0x00000000032D0000-0x00000000032D1000-memory.dmp

Filesize
4KB

Download
memory/1132-49-0x00000000032D0000-0x00000000032D1000-memory.dmp

Filesize
4KB

Download
memory/1132-48-0x00000000032D0000-0x00000000032D1000-memory.dmp

Filesize
4KB

Download
memory/1132-47-0x00000000032D0000-0x00000000032D1000-memory.dmp

Filesize
4KB

Download
memory/1132-46-0x00000000032D0000-0x00000000032D1000-memory.dmp

Filesize
4KB

Download
memory/1132-45-0x00000000032D0000-0x00000000032D1000-memory.dmp

Filesize
4KB

Download
memory/1132-44-0x00000000032D0000-0x00000000032D1000-memory.dmp

Filesize
4KB

Download
memory/1132-43-0x00000000032D0000-0x00000000032D1000-memory.dmp

Filesize
4KB

Download
memory/1132-42-0x00000000032D0000-0x00000000032D1000-memory.dmp

Filesize
4KB

Download
memory/1132-41-0x00000000032D0000-0x00000000032D1000-memory.dmp

Filesize
4KB

Download
memory/1132-40-0x00000000032D0000-0x00000000032D1000-memory.dmp

Filesize
4KB

Download
memory/1132-39-0x00000000032D0000-0x00000000032D1000-memory.dmp

Filesize
4KB

Download
memory/1132-38-0x00000000032D0000-0x00000000032D1000-memory.dmp

Filesize
4KB

Download
memory/1132-37-0x00000000032D0000-0x00000000032D1000-memory.dmp

Filesize
4KB

Download
memory/1132-36-0x00000000032D0000-0x00000000032D1000-memory.dmp

Filesize
4KB

Download
memory/1132-35-0x00000000032D0000-0x00000000032D1000-memory.dmp

Filesize
4KB

Download
memory/1132-34-0x00000000032D0000-0x00000000032D1000-memory.dmp

Filesize
4KB

Download
memory/1132-33-0x00000000032D0000-0x00000000032D1000-memory.dmp

Filesize
4KB

Download
memory/1132-32-0x00000000032D0000-0x00000000032D1000-memory.dmp

Filesize
4KB

Download
memory/1132-31-0x00000000032D0000-0x00000000032D1000-memory.dmp

Filesize
4KB

Download
memory/1132-30-0x00000000032D0000-0x00000000032D1000-memory.dmp

Filesize
4KB

Download
memory/1132-29-0x00000000032D0000-0x00000000032D1000-memory.dmp

Filesize
4KB

Download
memory/1132-28-0x00000000032D0000-0x00000000032D1000-memory.dmp

Filesize
4KB

Download
memory/1132-27-0x00000000032D0000-0x00000000032D1000-memory.dmp

Filesize
4KB

Download
memory/1132-26-0x00000000032D0000-0x00000000032D1000-memory.dmp

Filesize
4KB

Download
memory/1132-25-0x00000000032D0000-0x00000000032D1000-memory.dmp

Filesize
4KB

Download
memory/1132-24-0x00000000032D0000-0x00000000032D1000-memory.dmp

Filesize
4KB

Download
memory/1132-23-0x00000000032D0000-0x00000000032D1000-memory.dmp

Filesize
4KB

Download
memory/1132-22-0x00000000032D0000-0x00000000032D1000-memory.dmp

Filesize
4KB

Download
memory/1132-21-0x00000000032D0000-0x00000000032D1000-memory.dmp

Filesize
4KB

Download
memory/1132-20-0x00000000032D0000-0x00000000032D1000-memory.dmp

Filesize
4KB

Download
memory/1132-19-0x00000000032D0000-0x00000000032D1000-memory.dmp

Filesize
4KB

Download
memory/1132-17-0x00000000032D0000-0x00000000032D1000-memory.dmp

Filesize
4KB

Download
memory/1132-16-0x00000000032E0000-0x00000000032E1000-memory.dmp

Filesize
4KB

Download
memory/1132-15-0x00000000032E0000-0x00000000032E1000-memory.dmp

Filesize
4KB

Download
memory/1132-14-0x00000000032E0000-0x00000000032E1000-memory.dmp

Filesize
4KB

Download
memory/1132-13-0x00000000032E0000-0x00000000032E1000-memory.dmp

Filesize
4KB

Download
memory/1132-12-0x00000000032E0000-0x00000000032E1000-memory.dmp

Filesize
4KB

Download
memory/1132-2-0x00000000005F0000-0x00000000005F1000-memory.dmp

Filesize
4KB

Download
memory/1132-79-0x0000000000350000-0x00000000003A4000-memory.dmp

Filesize
336KB

Download
memory/1132-77-0x0000000000400000-0x00000000005B2000-memory.dmp

Filesize
1.7MB

Download
memory/1132-80-0x0000000000400000-0x00000000005B2000-memory.dmp

Filesize
1.7MB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads