modiloader | e2ea44103a510f3381b573b2082c029ca0e51411bf380c3fe02376c5114496e9

General

Target

89d8eb69709a093a463be1b96a13c34c_JaffaCakes118
Size

521KB
Sample

241103-f6nenswjbx
MD5

89d8eb69709a093a463be1b96a13c34c
SHA1

0050623de9db92310232d016b7faf3ac4723682f
SHA256

e2ea44103a510f3381b573b2082c029ca0e51411bf380c3fe02376c5114496e9
SHA512

0a2c877c17ab9ef661cb3b5250bcc6a8daab0b4cc07ecf8b50acdac45aeda65dd7cc51453595b04181a7a29766b0f4b909a5adfa2918eb6907fb960ca636d670
SSDEEP

12288:hNVmFGuqxGXElwkcR9himlNXDlvq28mnkRaoUa1jlojcnaz9y:hfuGGXEWkG5xvaR/Ua1Wjc

Score

10^/10

Malware Config

Targets

- Target
  
  89d8eb69709a093a463be1b96a13c34c_JaffaCakes118
- Size
  
  521KB
- MD5
  
  89d8eb69709a093a463be1b96a13c34c
- SHA1
  
  0050623de9db92310232d016b7faf3ac4723682f
- SHA256
  
  e2ea44103a510f3381b573b2082c029ca0e51411bf380c3fe02376c5114496e9
- SHA512
  
  0a2c877c17ab9ef661cb3b5250bcc6a8daab0b4cc07ecf8b50acdac45aeda65dd7cc51453595b04181a7a29766b0f4b909a5adfa2918eb6907fb960ca636d670
- SSDEEP
  
  12288:hNVmFGuqxGXElwkcR9himlNXDlvq28mnkRaoUa1jlojcnaz9y:hfuGGXEWkG5xvaR/Ua1Wjc
Score

10^/10

modiloader discovery evasion trojan upx
- ModiLoader, DBatLoader
  ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
  trojan modiloader
- Modiloader family
  modiloader
- ModiLoader Second Stage
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
  evasion trojan
- Suspicious use of SetThreadContext
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

2

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

ModiLoader, DBatLoader

Modiloader family

ModiLoader Second Stage

Executes dropped EXE

Loads dropped DLL

Checks whether UAC is enabled

Suspicious use of SetThreadContext

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2