modiloader | 1a2bee1dc78227fe81ef148bbdd4c49fbee61ed6b617aa6bcceb27e249665a78 | Triage

Submit
Reports

Overview

overview

Static

static

5

81c1b228da...18.exe

windows7-x64

81c1b228da...18.exe

windows10-2004-x64

Sharing

General

Target

81c1b228dad9d5e78e26907492e4ce0f_JaffaCakes118
Size

275KB
Sample

241031-fxpw5s1ejk
MD5

81c1b228dad9d5e78e26907492e4ce0f
SHA1

7e62f509609b2261d49bff260c234e14a1751bb2
SHA256

1a2bee1dc78227fe81ef148bbdd4c49fbee61ed6b617aa6bcceb27e249665a78
SHA512

d8d56af60d3f7e9bfe694c7de9b9eaff53b6485457cac724a74f99de9efe7355935afebeece19dc096e9c77309d2a96e2897a79e8b3d63b7fa1a215c9f32f412
SSDEEP

6144:o/pm9xGSUOv0QEAkoFgegI6BFfe35sA0laZgQZmUIgoSz:sm930QooFdc7AZ3jIgoS

Score

10^/10

modiloader defense_evasion discovery trojan upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

81c1b228dad9d5e78e26907492e4ce0f_JaffaCakes118.exe

Resource

win7-20240708-en

modiloader defense_evasion discovery trojan upx

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral2

Sample

81c1b228dad9d5e78e26907492e4ce0f_JaffaCakes118.exe

Resource

win10v2004-20241007-en

modiloader defense_evasion discovery trojan upx

windows10-2004-x64

9 signatures

150 seconds

Malware Config

Targets

- Target
  
  81c1b228dad9d5e78e26907492e4ce0f_JaffaCakes118
- Size
  
  275KB
- MD5
  
  81c1b228dad9d5e78e26907492e4ce0f
- SHA1
  
  7e62f509609b2261d49bff260c234e14a1751bb2
- SHA256
  
  1a2bee1dc78227fe81ef148bbdd4c49fbee61ed6b617aa6bcceb27e249665a78
- SHA512
  
  d8d56af60d3f7e9bfe694c7de9b9eaff53b6485457cac724a74f99de9efe7355935afebeece19dc096e9c77309d2a96e2897a79e8b3d63b7fa1a215c9f32f412
- SSDEEP
  
  6144:o/pm9xGSUOv0QEAkoFgegI6BFfe35sA0laZgQZmUIgoSz:sm930QooFdc7AZ3jIgoS
Score

10^/10

modiloader defense_evasion discovery trojan upx
- ModiLoader, DBatLoader
  ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
  trojan modiloader
- Modiloader family
  modiloader
- ModiLoader Second Stage
- Impair Defenses: Safe Mode Boot
  defense_evasion
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Impair Defenses

Safe Mode Boot

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

modiloaderdefense_evasiondiscoverytrojanupx

behavioral2

modiloaderdefense_evasiondiscoverytrojanupx

© 2018-2024

Terms | Privacy