modiloader | efdb2d2e3bcf61f0be713ab1a84f75cdd2d947d207c98fe011b3d15b1a48844b | Triage

Submit
Reports

Overview

overview

Static

static

ee8943bb6e...18.exe

windows7-x64

ee8943bb6e...18.exe

windows10-2004-x64

Sharing

General

Target

ee8943bb6e58151490373cdc44e61577_JaffaCakes118
Size

192KB
Sample

240920-19d1ma1ema
MD5

ee8943bb6e58151490373cdc44e61577
SHA1

e2087050b922068cfc6c62df3a4498b52739c1d5
SHA256

efdb2d2e3bcf61f0be713ab1a84f75cdd2d947d207c98fe011b3d15b1a48844b
SHA512

9eda18db6c2ea1b522778e96c113c5ed45cc0ebca93bb190fe400e2f205fe1764aa718aef741313dd8df84bd06d238c2730bb24e9587051dd3f36d610e64d2bc
SSDEEP

3072:/cFl8P2TYmTqLGHjSoC1FifKJjmBeaMlUwTYkQmZmwTWoZHjX8ZCBypchzL6DHV:/cn8P2TY10Sm9evmc7ZWo1IZhWhX6D

Score

10^/10

modiloader discovery trojan upx

Static task

static1

4 signatures

Behavioral task

behavioral1

Sample

ee8943bb6e58151490373cdc44e61577_JaffaCakes118.exe

Resource

win7-20240903-en

modiloader discovery trojan upx

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

ee8943bb6e58151490373cdc44e61577_JaffaCakes118.exe

Resource

win10v2004-20240802-en

modiloader discovery trojan upx

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  ee8943bb6e58151490373cdc44e61577_JaffaCakes118
- Size
  
  192KB
- MD5
  
  ee8943bb6e58151490373cdc44e61577
- SHA1
  
  e2087050b922068cfc6c62df3a4498b52739c1d5
- SHA256
  
  efdb2d2e3bcf61f0be713ab1a84f75cdd2d947d207c98fe011b3d15b1a48844b
- SHA512
  
  9eda18db6c2ea1b522778e96c113c5ed45cc0ebca93bb190fe400e2f205fe1764aa718aef741313dd8df84bd06d238c2730bb24e9587051dd3f36d610e64d2bc
- SSDEEP
  
  3072:/cFl8P2TYmTqLGHjSoC1FifKJjmBeaMlUwTYkQmZmwTWoZHjX8ZCBypchzL6DHV:/cn8P2TY10Sm9evmc7ZWo1IZhWhX6D
Score

10^/10

modiloader discovery trojan upx
- ModiLoader, DBatLoader
  ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
  trojan modiloader
- ModiLoader Second Stage
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

modiloaderdiscoverytrojanupx

behavioral2

modiloaderdiscoverytrojanupx

© 2018-2025

Terms | Privacy