modiloader | 3cc0da4d1397662973ee6c4dad5376edeb3f42817458648283471c485c253319 | Triage

Submit
Reports

Overview

overview

Static

static

3

f490974191...18.exe

windows7-x64

f490974191...18.exe

windows10-2004-x64

3

Sharing

General

Target

f490974191ee4b5b217acdad3c4cafa4_JaffaCakes118
Size

1.2MB
Sample

240924-1m9tsazgrd
MD5

f490974191ee4b5b217acdad3c4cafa4
SHA1

54db71e3fef3607212019ffe54b0011939757fc5
SHA256

3cc0da4d1397662973ee6c4dad5376edeb3f42817458648283471c485c253319
SHA512

8b24f65348a969531c5b777061a5bb6cb7b5ba478ee47bbab0abe62544e5affddf131ff4b1d4accc26abb77596370d8c3c43b2cc26320bd78ba6d4a8ed163206
SSDEEP

24576:f/nCl2weAWGU2wTv33LwKu0dddpRABAiKqYwY7n7/Skrd8uqyvISpz7n6nhDhTuc:M2pV3iM1RAHKq7Y77/KuqqN7nAhanm

Score

10^/10

modiloader discovery evasion trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

f490974191ee4b5b217acdad3c4cafa4_JaffaCakes118.exe

Resource

win7-20240903-en

modiloader discovery evasion trojan

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

f490974191ee4b5b217acdad3c4cafa4_JaffaCakes118.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  
  f490974191ee4b5b217acdad3c4cafa4_JaffaCakes118
- Size
  
  1.2MB
- MD5
  
  f490974191ee4b5b217acdad3c4cafa4
- SHA1
  
  54db71e3fef3607212019ffe54b0011939757fc5
- SHA256
  
  3cc0da4d1397662973ee6c4dad5376edeb3f42817458648283471c485c253319
- SHA512
  
  8b24f65348a969531c5b777061a5bb6cb7b5ba478ee47bbab0abe62544e5affddf131ff4b1d4accc26abb77596370d8c3c43b2cc26320bd78ba6d4a8ed163206
- SSDEEP
  
  24576:f/nCl2weAWGU2wTv33LwKu0dddpRABAiKqYwY7n7/Skrd8uqyvISpz7n6nhDhTuc:M2pV3iM1RAHKq7Y77/KuqqN7nAhanm
Score

10^/10

modiloader discovery evasion trojan
- ModiLoader, DBatLoader
  ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
  trojan modiloader
- UAC bypass
  evasion trojan
- ModiLoader Second Stage
- Loads dropped DLL
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

modiloaderdiscoveryevasiontrojan

behavioral2

© 2018-2025

Terms | Privacy