modiloader | 4a3fe70b9bc74c71bcd8bc614067c6428bc521f2acd27c85a65466750eb5c5a4 | Triage

Submit
Reports

Overview

overview

Static

static

3

fa4d101500...18.exe

windows7-x64

fa4d101500...18.exe

windows10-2004-x64

Sharing

General

Target

fa4d101500e0828d3ccd55e134476ee6_JaffaCakes118
Size

347KB
Sample

240927-m933vssckh
MD5

fa4d101500e0828d3ccd55e134476ee6
SHA1

dfd00d319451bbbc9a1cb7aaaf991081cd42bcb8
SHA256

4a3fe70b9bc74c71bcd8bc614067c6428bc521f2acd27c85a65466750eb5c5a4
SHA512

d59ddf0a3f3bb51661240fb80f1d26c1259c3429e9a1c6fe906eae1e311f08b618adf843bbf2955a18f6f301f4d8c04974490e83dbd159d819da086953ea71c5
SSDEEP

6144:aZiEMpRomrugQLBGNI5w+xAVkkl8bl0lB123+RQ3q80r:aZY7omxMBGNu/ez8g1gcr

Score

10^/10

modiloader discovery trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

fa4d101500e0828d3ccd55e134476ee6_JaffaCakes118.exe

Resource

win7-20240708-en

modiloader discovery trojan

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

fa4d101500e0828d3ccd55e134476ee6_JaffaCakes118.exe

Resource

win10v2004-20240802-en

modiloader discovery trojan

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  fa4d101500e0828d3ccd55e134476ee6_JaffaCakes118
- Size
  
  347KB
- MD5
  
  fa4d101500e0828d3ccd55e134476ee6
- SHA1
  
  dfd00d319451bbbc9a1cb7aaaf991081cd42bcb8
- SHA256
  
  4a3fe70b9bc74c71bcd8bc614067c6428bc521f2acd27c85a65466750eb5c5a4
- SHA512
  
  d59ddf0a3f3bb51661240fb80f1d26c1259c3429e9a1c6fe906eae1e311f08b618adf843bbf2955a18f6f301f4d8c04974490e83dbd159d819da086953ea71c5
- SSDEEP
  
  6144:aZiEMpRomrugQLBGNI5w+xAVkkl8bl0lB123+RQ3q80r:aZY7omxMBGNu/ez8g1gcr
Score

10^/10

modiloader discovery trojan
- ModiLoader, DBatLoader
  ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
  trojan modiloader
- ModiLoader Second Stage
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

modiloaderdiscoverytrojan

behavioral2

modiloaderdiscoverytrojan

© 2018-2025

Terms | Privacy