modiloader | ef8d2654ebc7cd8956506c7e0ded81eb01c6eb83bf4069e3c21f2effd76e7355 | Triage

Submit
Reports

Overview

overview

Static

static

7

ed7a2bf37d...18.exe

windows7-x64

ed7a2bf37d...18.exe

windows10-2004-x64

7

Sharing

General

Target

ed7a2bf37dda3ee20eacd7418d5510c9_JaffaCakes118
Size

328KB
Sample

240920-nhb1qstfqk
MD5

ed7a2bf37dda3ee20eacd7418d5510c9
SHA1

3aedc93d1eaa49f2937e38f4107b7dc52b288a88
SHA256

ef8d2654ebc7cd8956506c7e0ded81eb01c6eb83bf4069e3c21f2effd76e7355
SHA512

1ed61325b788e04193841b9149cd3294cb73a3f3c6272dc3fa7983ce97506bd41daa569cfb1ab95bb05d5cbcc0ee73f2760bdde016d0d183fdd0661dcdd83ad3
SSDEEP

6144:kXAD7mWfh9QHzpNMJs+4qlyf7ttvgMGXY5S6o2W4gJsTgVw0AFFok:BD7mC9SFK2Bqof7DvcMk4hkVJAV

Score

10^/10

modiloader discovery trojan upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

ed7a2bf37dda3ee20eacd7418d5510c9_JaffaCakes118.exe

Resource

win7-20240704-en

modiloader discovery trojan upx

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral2

Sample

ed7a2bf37dda3ee20eacd7418d5510c9_JaffaCakes118.exe

Resource

win10v2004-20240910-en

windows10-2004-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  
  ed7a2bf37dda3ee20eacd7418d5510c9_JaffaCakes118
- Size
  
  328KB
- MD5
  
  ed7a2bf37dda3ee20eacd7418d5510c9
- SHA1
  
  3aedc93d1eaa49f2937e38f4107b7dc52b288a88
- SHA256
  
  ef8d2654ebc7cd8956506c7e0ded81eb01c6eb83bf4069e3c21f2effd76e7355
- SHA512
  
  1ed61325b788e04193841b9149cd3294cb73a3f3c6272dc3fa7983ce97506bd41daa569cfb1ab95bb05d5cbcc0ee73f2760bdde016d0d183fdd0661dcdd83ad3
- SSDEEP
  
  6144:kXAD7mWfh9QHzpNMJs+4qlyf7ttvgMGXY5S6o2W4gJsTgVw0AFFok:BD7mC9SFK2Bqof7DvcMk4hkVJAV
Score

10^/10

modiloader discovery trojan upx
- ModiLoader, DBatLoader
  ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
  trojan modiloader
- ModiLoader Second Stage
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

modiloaderdiscoverytrojanupx

behavioral2

© 2018-2025

Terms | Privacy