modiloader | 222cd8a60704fe3912b7633cb442e30f300c89e06f5499d1f65c62795e0d2f1a | Triage

Submit
Reports

Overview

overview

Static

static

3

db13d97211...18.exe

windows7-x64

db13d97211...18.exe

windows10-2004-x64

Sharing

General

Target

db13d97211f05bbd03146f3ab5b195e6_JaffaCakes118
Size

63KB
Sample

240911-x9lhxsydrm
MD5

db13d97211f05bbd03146f3ab5b195e6
SHA1

f7cdca2231bb6afcc9ce0b7852889dfa64345502
SHA256

222cd8a60704fe3912b7633cb442e30f300c89e06f5499d1f65c62795e0d2f1a
SHA512

a95d1bed850d73ea2aef140ff0ae3b59764baf70f0fe8cdb6e9b125c299be0e0ea98b769789bee187d7435111cd886ec08a65df7719d6e2f10a16e1060e7164d
SSDEEP

1536:qDqoQi0TKgf+z1o75NiGZL2OkP5iGQdPLq1icYdIlSuHaDU:Wx0lKO9NiGZiMGQ1LGX49U

Score

10^/10

modiloader discovery persistence trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

db13d97211f05bbd03146f3ab5b195e6_JaffaCakes118.exe

Resource

win7-20240903-en

modiloader discovery persistence trojan

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

db13d97211f05bbd03146f3ab5b195e6_JaffaCakes118.exe

Resource

win10v2004-20240802-en

modiloader discovery persistence trojan

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  db13d97211f05bbd03146f3ab5b195e6_JaffaCakes118
- Size
  
  63KB
- MD5
  
  db13d97211f05bbd03146f3ab5b195e6
- SHA1
  
  f7cdca2231bb6afcc9ce0b7852889dfa64345502
- SHA256
  
  222cd8a60704fe3912b7633cb442e30f300c89e06f5499d1f65c62795e0d2f1a
- SHA512
  
  a95d1bed850d73ea2aef140ff0ae3b59764baf70f0fe8cdb6e9b125c299be0e0ea98b769789bee187d7435111cd886ec08a65df7719d6e2f10a16e1060e7164d
- SSDEEP
  
  1536:qDqoQi0TKgf+z1o75NiGZL2OkP5iGQdPLq1icYdIlSuHaDU:Wx0lKO9NiGZiMGQ1LGX49U
Score

10^/10

modiloader discovery persistence trojan
- ModiLoader, DBatLoader
  ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
  trojan modiloader
- ModiLoader Second Stage
- Adds Run key to start application
  persistence
- Drops file in System32 directory
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

modiloaderdiscoverypersistencetrojan

behavioral2

modiloaderdiscoverypersistencetrojan

© 2018-2025

Terms | Privacy