modiloader | d0600a27be2d018bd6b92c965636111f2c0e53dcc42d4a698e794b74a1a51b55 | Triage

Submit
Reports

Overview

overview

Static

static

3

edfe9a6b0a...18.exe

windows7-x64

edfe9a6b0a...18.exe

windows10-2004-x64

Sharing

General

Target

edfe9a6b0a02570d8696e3df64589ed7_JaffaCakes118
Size

540KB
Sample

240920-t2vvvawdle
MD5

edfe9a6b0a02570d8696e3df64589ed7
SHA1

6a4c1244019d3fd49a14b38d016c8b8773424a7f
SHA256

d0600a27be2d018bd6b92c965636111f2c0e53dcc42d4a698e794b74a1a51b55
SHA512

90325d9e80f08f2059c1e4cb529867c42034bdf3612eda3ca4d314d6c53b61fa8da12ae8d2fee2b1038cc390638047a611eed8c6476ed973a02c3469b6f1ed0f
SSDEEP

12288:AJZUQeM0tKPfjX3c3EvvJF3Z4mxx5s5fGUiAoXr635ZLIONd1d:AoM0EPLmkvJQmXqIUiAoXr637LIod1d

Score

10^/10

modiloader discovery trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

edfe9a6b0a02570d8696e3df64589ed7_JaffaCakes118.exe

Resource

win7-20240903-en

modiloader discovery trojan

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

edfe9a6b0a02570d8696e3df64589ed7_JaffaCakes118.exe

Resource

win10v2004-20240802-en

modiloader discovery trojan

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  edfe9a6b0a02570d8696e3df64589ed7_JaffaCakes118
- Size
  
  540KB
- MD5
  
  edfe9a6b0a02570d8696e3df64589ed7
- SHA1
  
  6a4c1244019d3fd49a14b38d016c8b8773424a7f
- SHA256
  
  d0600a27be2d018bd6b92c965636111f2c0e53dcc42d4a698e794b74a1a51b55
- SHA512
  
  90325d9e80f08f2059c1e4cb529867c42034bdf3612eda3ca4d314d6c53b61fa8da12ae8d2fee2b1038cc390638047a611eed8c6476ed973a02c3469b6f1ed0f
- SSDEEP
  
  12288:AJZUQeM0tKPfjX3c3EvvJF3Z4mxx5s5fGUiAoXr635ZLIONd1d:AoM0EPLmkvJQmXqIUiAoXr637LIod1d
Score

10^/10

modiloader discovery trojan
- ModiLoader, DBatLoader
  ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
  trojan modiloader
- ModiLoader Second Stage
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

modiloaderdiscoverytrojan

behavioral2

modiloaderdiscoverytrojan

© 2018-2025

Terms | Privacy