modiloader | 1f795cf7ca93198fbc25fbe3e875edc16109bba6649cec0fcd0943104e4d5b49 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

3

e17bf78eac...18.exe

windows7-x64

e17bf78eac...18.exe

windows10-2004-x64

Sharing

General

Target

e17bf78eac967967a114a91b1b086f6c_JaffaCakes118
Size

669KB
Sample

240915-cd4dmszdpq
MD5

e17bf78eac967967a114a91b1b086f6c
SHA1

4b6aff80e42bfb0366b74f115d127d1e5e4d9713
SHA256

1f795cf7ca93198fbc25fbe3e875edc16109bba6649cec0fcd0943104e4d5b49
SHA512

3a08451ab347f06bc9682bccd4005a7c29048429b10807648851141da2b9ad9e2b97c24a30960e65e51b39362b0fd9bf56fdcf7c53c4fd5bfba6395ef5f6247f
SSDEEP

12288:Bwz5ufc2lZ2kWSc/cBJRGVWP8U/1F3Z4mxxhMHg5L8mTVM2+eCC:Bwqc2v2kvx98u1QmXhQgGwMQJ

Score

10^/10

modiloader discovery trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

e17bf78eac967967a114a91b1b086f6c_JaffaCakes118.exe

Resource

win7-20240903-en

modiloader discovery trojan

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

e17bf78eac967967a114a91b1b086f6c_JaffaCakes118.exe

Resource

win10v2004-20240802-en

modiloader discovery trojan

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  e17bf78eac967967a114a91b1b086f6c_JaffaCakes118
- Size
  
  669KB
- MD5
  
  e17bf78eac967967a114a91b1b086f6c
- SHA1
  
  4b6aff80e42bfb0366b74f115d127d1e5e4d9713
- SHA256
  
  1f795cf7ca93198fbc25fbe3e875edc16109bba6649cec0fcd0943104e4d5b49
- SHA512
  
  3a08451ab347f06bc9682bccd4005a7c29048429b10807648851141da2b9ad9e2b97c24a30960e65e51b39362b0fd9bf56fdcf7c53c4fd5bfba6395ef5f6247f
- SSDEEP
  
  12288:Bwz5ufc2lZ2kWSc/cBJRGVWP8U/1F3Z4mxxhMHg5L8mTVM2+eCC:Bwqc2v2kvx98u1QmXhQgGwMQJ
Score

10^/10

modiloader discovery trojan
- ModiLoader, DBatLoader
  ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
  trojan modiloader
- ModiLoader Second Stage
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

modiloaderdiscoverytrojan

behavioral2

modiloaderdiscoverytrojan

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.