modiloader | 54e4f6d6b8dea267a787a2f9ff80b493e9febb5383c0cc62964b77dae406eafa | Triage

Submit
Reports

Overview

overview

Static

static

3

f9a3ac2df1...18.exe

windows7-x64

f9a3ac2df1...18.exe

windows10-2004-x64

Sharing

General

Target

f9a3ac2df15abe83e8b0a9db37008dde_JaffaCakes118
Size

739KB
Sample

240927-d6tkkswerh
MD5

f9a3ac2df15abe83e8b0a9db37008dde
SHA1

894002b27b9965b7cd8fbda5cc4f2608f95705c1
SHA256

54e4f6d6b8dea267a787a2f9ff80b493e9febb5383c0cc62964b77dae406eafa
SHA512

902952dcde5e5f5ec8ea38b7e8bcd909591e2d2a4056d22a0f9be218f71955051800ad7fb1f3461effdf79e0826218d034f82cc2cd61e5cad06d75fbf2b35f8e
SSDEEP

12288:vhc//////MuqVVuebVfqT0R5LzdFpFGSkShmlNgzdO1BjfCtGdIYH:pc//////MbVVueZfWq3zwBOzUja0dIYH

Score

10^/10

modiloader discovery trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

f9a3ac2df15abe83e8b0a9db37008dde_JaffaCakes118.exe

Resource

win7-20240903-en

modiloader discovery trojan

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral2

Sample

f9a3ac2df15abe83e8b0a9db37008dde_JaffaCakes118.exe

Resource

win10v2004-20240802-en

modiloader discovery trojan

windows10-2004-x64

9 signatures

150 seconds

Malware Config

Targets

- Target
  
  f9a3ac2df15abe83e8b0a9db37008dde_JaffaCakes118
- Size
  
  739KB
- MD5
  
  f9a3ac2df15abe83e8b0a9db37008dde
- SHA1
  
  894002b27b9965b7cd8fbda5cc4f2608f95705c1
- SHA256
  
  54e4f6d6b8dea267a787a2f9ff80b493e9febb5383c0cc62964b77dae406eafa
- SHA512
  
  902952dcde5e5f5ec8ea38b7e8bcd909591e2d2a4056d22a0f9be218f71955051800ad7fb1f3461effdf79e0826218d034f82cc2cd61e5cad06d75fbf2b35f8e
- SSDEEP
  
  12288:vhc//////MuqVVuebVfqT0R5LzdFpFGSkShmlNgzdO1BjfCtGdIYH:pc//////MbVVueZfWq3zwBOzUja0dIYH
Score

10^/10

modiloader discovery trojan
- ModiLoader, DBatLoader
  ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
  trojan modiloader
- ModiLoader Second Stage
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

modiloaderdiscoverytrojan

behavioral2

modiloaderdiscoverytrojan

© 2018-2025

Terms | Privacy