modiloader | 5defa642588973d1f05b5727da4abe62fc4af6abc85b510a2eaf28288502e1ca | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

3

17912b6fe9...18.exe

windows7-x64

17912b6fe9...18.exe

windows10-2004-x64

Sharing

General

Target

17912b6fe92a6a47b414b028685c60db_JaffaCakes118
Size

480KB
Sample

240627-z6w7cs1fmc
MD5

17912b6fe92a6a47b414b028685c60db
SHA1

754b1918a98bf85cfdd925e1a50ff3de17e8b1ef
SHA256

5defa642588973d1f05b5727da4abe62fc4af6abc85b510a2eaf28288502e1ca
SHA512

4ebff1a4b24c80a0233bf42e8f84584f4cb9543e1102f95336eb5e0591b99e58dd86ac46cd6a870053161ac5712141630294c8ddcbf67aa915a4c3d77cd16ae2
SSDEEP

6144:J1zdTAymDA+k86XxqaCBeFndXF2idZecnl20lHRxp3gCncduD7yB9VCO6Sco4q8d:FT1jf86Xxd7F3Z4mxx9DqVTVOCLu

Score

10^/10

modiloader trojan upx

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

17912b6fe92a6a47b414b028685c60db_JaffaCakes118.exe

Resource

win7-20240221-en

modiloader trojan

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

17912b6fe92a6a47b414b028685c60db_JaffaCakes118.exe

Resource

win10v2004-20240508-en

modiloader trojan upx

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  17912b6fe92a6a47b414b028685c60db_JaffaCakes118
- Size
  
  480KB
- MD5
  
  17912b6fe92a6a47b414b028685c60db
- SHA1
  
  754b1918a98bf85cfdd925e1a50ff3de17e8b1ef
- SHA256
  
  5defa642588973d1f05b5727da4abe62fc4af6abc85b510a2eaf28288502e1ca
- SHA512
  
  4ebff1a4b24c80a0233bf42e8f84584f4cb9543e1102f95336eb5e0591b99e58dd86ac46cd6a870053161ac5712141630294c8ddcbf67aa915a4c3d77cd16ae2
- SSDEEP
  
  6144:J1zdTAymDA+k86XxqaCBeFndXF2idZecnl20lHRxp3gCncduD7yB9VCO6Sco4q8d:FT1jf86Xxd7F3Z4mxx9DqVTVOCLu
Score

10^/10

modiloader trojan upx
- ModiLoader, DBatLoader
  ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
  trojan modiloader
- ModiLoader Second Stage
- Deletes itself
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

modiloadertrojan

behavioral2

modiloadertrojanupx

© 2018-2025

Terms | Privacy