modiloader | ea337d10dbd13bb6552d4922d24e9016c7cfafba02d435b9a7495cd6f6fc1f54 | Triage

Submit
Reports

Overview

overview

Static

static

3

ebb715f0a3...18.exe

windows7-x64

ebb715f0a3...18.exe

windows10-2004-x64

Sharing

General

Target

ebb715f0a3763ff0e7f892d26d53af4f_JaffaCakes118
Size

747KB
Sample

240919-trpwvaybrj
MD5

ebb715f0a3763ff0e7f892d26d53af4f
SHA1

69bcaa7714fb6817c8b090b19946783445dbfb99
SHA256

ea337d10dbd13bb6552d4922d24e9016c7cfafba02d435b9a7495cd6f6fc1f54
SHA512

7221e89902a8b5c4909ae3b06f142fb383ac0e73ad1128309af9600bb58e98fb70e968fcd0f8504c3eda854147926b01cade0945715522692bb9f6c3507f8c61
SSDEEP

12288:CjhzKpuBIHZk7IkivM4jRxvE5Euh5DqF3Z4mxxUDqVTVOCV:C1zGNFjE5EMWQmXDVTzV

Score

10^/10

modiloader discovery persistence trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

ebb715f0a3763ff0e7f892d26d53af4f_JaffaCakes118.exe

Resource

win7-20240729-en

modiloader discovery persistence trojan

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral2

Sample

ebb715f0a3763ff0e7f892d26d53af4f_JaffaCakes118.exe

Resource

win10v2004-20240802-en

modiloader discovery persistence trojan

windows10-2004-x64

8 signatures

150 seconds

Malware Config

Targets

- Target
  
  ebb715f0a3763ff0e7f892d26d53af4f_JaffaCakes118
- Size
  
  747KB
- MD5
  
  ebb715f0a3763ff0e7f892d26d53af4f
- SHA1
  
  69bcaa7714fb6817c8b090b19946783445dbfb99
- SHA256
  
  ea337d10dbd13bb6552d4922d24e9016c7cfafba02d435b9a7495cd6f6fc1f54
- SHA512
  
  7221e89902a8b5c4909ae3b06f142fb383ac0e73ad1128309af9600bb58e98fb70e968fcd0f8504c3eda854147926b01cade0945715522692bb9f6c3507f8c61
- SSDEEP
  
  12288:CjhzKpuBIHZk7IkivM4jRxvE5Euh5DqF3Z4mxxUDqVTVOCV:C1zGNFjE5EMWQmXDVTzV
Score

10^/10

modiloader discovery persistence trojan
- ModiLoader, DBatLoader
  ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
  trojan modiloader
- ModiLoader Second Stage
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

modiloaderdiscoverypersistencetrojan

behavioral2

modiloaderdiscoverypersistencetrojan

© 2018-2025

Terms | Privacy