modiloader | 4c63ef32f54ad2c1721f0b339823060fc5b45e739c6ab835ed7e6923ad423cea | Triage

Submit
Reports

Overview

overview

Static

static

3

cd0f474d0d...18.exe

windows7-x64

cd0f474d0d...18.exe

windows10-2004-x64

Sharing

General

Target

cd0f474d0d7b5ded430f896b825f2369_JaffaCakes118
Size

575KB
Sample

240831-ssqn4a1arf
MD5

cd0f474d0d7b5ded430f896b825f2369
SHA1

49a09d620bf8681b7f9eb3ed8300f48cc357b1a9
SHA256

4c63ef32f54ad2c1721f0b339823060fc5b45e739c6ab835ed7e6923ad423cea
SHA512

471f5e4f355a0053b9e10323256b9a08176df27bc22bd7da01d8dd34822b404f4cac3c0b960df83a97fca3e51a1d8320ef8525f6239ab6b11faaa752729ce953
SSDEEP

12288:UMOjpD8p8jN+5M2wkze0cb9xvo28GoIE1c2obY7zWBULDQ/gq4:UMOjR0w85Kf0WBo2tmocEE

Score

10^/10

modiloader discovery trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

cd0f474d0d7b5ded430f896b825f2369_JaffaCakes118.exe

Resource

win7-20240704-en

modiloader discovery trojan

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral2

Sample

cd0f474d0d7b5ded430f896b825f2369_JaffaCakes118.exe

Resource

win10v2004-20240802-en

modiloader discovery trojan

windows10-2004-x64

9 signatures

150 seconds

Malware Config

Targets

- Target
  
  cd0f474d0d7b5ded430f896b825f2369_JaffaCakes118
- Size
  
  575KB
- MD5
  
  cd0f474d0d7b5ded430f896b825f2369
- SHA1
  
  49a09d620bf8681b7f9eb3ed8300f48cc357b1a9
- SHA256
  
  4c63ef32f54ad2c1721f0b339823060fc5b45e739c6ab835ed7e6923ad423cea
- SHA512
  
  471f5e4f355a0053b9e10323256b9a08176df27bc22bd7da01d8dd34822b404f4cac3c0b960df83a97fca3e51a1d8320ef8525f6239ab6b11faaa752729ce953
- SSDEEP
  
  12288:UMOjpD8p8jN+5M2wkze0cb9xvo28GoIE1c2obY7zWBULDQ/gq4:UMOjR0w85Kf0WBo2tmocEE
Score

10^/10

modiloader discovery trojan
- ModiLoader, DBatLoader
  ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
  trojan modiloader
- ModiLoader Second Stage
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

modiloaderdiscoverytrojan

behavioral2

modiloaderdiscoverytrojan

© 2018-2025

Terms | Privacy