modiloader | 29b672ce32deff5332d9e46c3693d0b1f301cdcee3c0571c16258064039f0065 | Triage

Submit
Reports

Overview

overview

Static

static

3

29b672ce32...65.exe

windows7-x64

29b672ce32...65.exe

windows10-2004-x64

Sharing

General

Target

29b672ce32deff5332d9e46c3693d0b1f301cdcee3c0571c16258064039f0065
Size

1.0MB
Sample

240917-ayrjgaxhnh
MD5

4b131050c9323d717f526e5942b6d7e3
SHA1

6d7f172f9806d4e1c8848ab2c99591d4ebf00f53
SHA256

29b672ce32deff5332d9e46c3693d0b1f301cdcee3c0571c16258064039f0065
SHA512

da13f0424e9c0758694262bb61407c0adb65d342eaaad169da94a8c396e5cec8f20ae3610ec8ce29c557457dfb33ad404780fe72a608ddab8b1c4ac08c3964cf
SSDEEP

24576:dEQiP5m51kWPYQLd5bQRM1a8DFW46dF1imLD9:da2zYkI8DFKn1imLp

Score

10^/10

modiloader discovery trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

29b672ce32deff5332d9e46c3693d0b1f301cdcee3c0571c16258064039f0065.exe

Resource

win7-20240903-en

modiloader discovery trojan

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

29b672ce32deff5332d9e46c3693d0b1f301cdcee3c0571c16258064039f0065.exe

Resource

win10v2004-20240802-en

modiloader discovery trojan

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  29b672ce32deff5332d9e46c3693d0b1f301cdcee3c0571c16258064039f0065
- Size
  
  1.0MB
- MD5
  
  4b131050c9323d717f526e5942b6d7e3
- SHA1
  
  6d7f172f9806d4e1c8848ab2c99591d4ebf00f53
- SHA256
  
  29b672ce32deff5332d9e46c3693d0b1f301cdcee3c0571c16258064039f0065
- SHA512
  
  da13f0424e9c0758694262bb61407c0adb65d342eaaad169da94a8c396e5cec8f20ae3610ec8ce29c557457dfb33ad404780fe72a608ddab8b1c4ac08c3964cf
- SSDEEP
  
  24576:dEQiP5m51kWPYQLd5bQRM1a8DFW46dF1imLD9:da2zYkI8DFKn1imLp
Score

10^/10

modiloader discovery trojan
- ModiLoader, DBatLoader
  ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
  trojan modiloader
- ModiLoader Second Stage
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

modiloaderdiscoverytrojan

behavioral2

modiloaderdiscoverytrojan

© 2018-2025

Terms | Privacy