modiloader | 29f77b189df5b17ffc9cbc5fc5d0c2de0cd708138eec0dc525f22397376488c9 | Triage

Submit
Reports

Overview

overview

Static

static

3

ea8fd4752b...18.exe

windows7-x64

ea8fd4752b...18.exe

windows10-2004-x64

Sharing

General

Target

ea8fd4752bdb295e0aa4bbb016499384_JaffaCakes118
Size

233KB
Sample

240919-er63ss1aql
MD5

ea8fd4752bdb295e0aa4bbb016499384
SHA1

2e4c55ab6307486a01700ae2cfdcbe70af1f4283
SHA256

29f77b189df5b17ffc9cbc5fc5d0c2de0cd708138eec0dc525f22397376488c9
SHA512

77b00ef91969cca16857d76ad17e31cedf6109392b0183c3604221cf24e38b858c540de2fe2f4198c35f29eb1cded5d1dd87cd30c0cd679e758e0f56062b10ab
SSDEEP

3072:ZfxgoOlq28LGYdU7gViHHywlk14W8AybVc1OUi/tiecqnOrbIAItbbSCcpS4gb:pbfdkgViBk1zykJqOrMltbbSnpjgb

Score

10^/10

modiloader discovery trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

ea8fd4752bdb295e0aa4bbb016499384_JaffaCakes118.exe

Resource

win7-20240903-en

modiloader discovery trojan

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

ea8fd4752bdb295e0aa4bbb016499384_JaffaCakes118.exe

Resource

win10v2004-20240802-en

modiloader discovery trojan

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  ea8fd4752bdb295e0aa4bbb016499384_JaffaCakes118
- Size
  
  233KB
- MD5
  
  ea8fd4752bdb295e0aa4bbb016499384
- SHA1
  
  2e4c55ab6307486a01700ae2cfdcbe70af1f4283
- SHA256
  
  29f77b189df5b17ffc9cbc5fc5d0c2de0cd708138eec0dc525f22397376488c9
- SHA512
  
  77b00ef91969cca16857d76ad17e31cedf6109392b0183c3604221cf24e38b858c540de2fe2f4198c35f29eb1cded5d1dd87cd30c0cd679e758e0f56062b10ab
- SSDEEP
  
  3072:ZfxgoOlq28LGYdU7gViHHywlk14W8AybVc1OUi/tiecqnOrbIAItbbSCcpS4gb:pbfdkgViBk1zykJqOrMltbbSnpjgb
Score

10^/10

modiloader discovery trojan
- ModiLoader, DBatLoader
  ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
  trojan modiloader
- ModiLoader Second Stage
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

modiloaderdiscoverytrojan

behavioral2

modiloaderdiscoverytrojan

© 2018-2025

Terms | Privacy