modiloader | db8f2e5f4bff8972bd19dbd4c2fa2814f798842dd667f884b4c2871bf9198523 | Triage

Submit
Reports

Overview

overview

Static

static

9e6903ea7b...18.exe

windows7-x64

9e6903ea7b...18.exe

windows10-2004-x64

Sharing

General

Target

9e6903ea7bcb457da3c05a3721f2eb51_JaffaCakes118
Size

391KB
Sample

241125-2zg5zaxpgk
MD5

9e6903ea7bcb457da3c05a3721f2eb51
SHA1

25f9b4ec7a45bf95455e79183427a625d099c113
SHA256

db8f2e5f4bff8972bd19dbd4c2fa2814f798842dd667f884b4c2871bf9198523
SHA512

d31b39b7e1f82dd6cafe66d7c428be442f329a51abe1b0c4cf1060f8dbd74c9b6b7640c41a147177e1f702928a18a803b6c7650d779eea641ad4a946b04abe5a
SSDEEP

6144:vo1U6zFbkOEKVWRucXQ3iJ4i/PjBPDClVPoaXQQl/IOy+pLkAijTBKJ80d7i:vmCKVmux3MDhDC2QijT08a7

Score

10^/10

modiloader defense_evasion discovery trojan

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

9e6903ea7bcb457da3c05a3721f2eb51_JaffaCakes118.exe

Resource

win7-20240903-en

modiloader defense_evasion discovery trojan

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

9e6903ea7bcb457da3c05a3721f2eb51_JaffaCakes118.exe

Resource

win10v2004-20241007-en

modiloader defense_evasion discovery trojan

windows10-2004-x64

10 signatures

150 seconds

Malware Config

Targets

- Target
  
  9e6903ea7bcb457da3c05a3721f2eb51_JaffaCakes118
- Size
  
  391KB
- MD5
  
  9e6903ea7bcb457da3c05a3721f2eb51
- SHA1
  
  25f9b4ec7a45bf95455e79183427a625d099c113
- SHA256
  
  db8f2e5f4bff8972bd19dbd4c2fa2814f798842dd667f884b4c2871bf9198523
- SHA512
  
  d31b39b7e1f82dd6cafe66d7c428be442f329a51abe1b0c4cf1060f8dbd74c9b6b7640c41a147177e1f702928a18a803b6c7650d779eea641ad4a946b04abe5a
- SSDEEP
  
  6144:vo1U6zFbkOEKVWRucXQ3iJ4i/PjBPDClVPoaXQQl/IOy+pLkAijTBKJ80d7i:vmCKVmux3MDhDC2QijT08a7
Score

10^/10

modiloader defense_evasion discovery trojan
- ModiLoader, DBatLoader
  ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
  trojan modiloader
- Modiloader family
  modiloader
- ModiLoader Second Stage
- Deletes itself
- Executes dropped EXE
- Indicator Removal: File Deletion
  Adversaries may delete files left behind by the actions of their intrusion activity.
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Indicator Removal

File Deletion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

modiloaderdefense_evasiondiscoverytrojan

behavioral2

modiloaderdefense_evasiondiscoverytrojan

© 2018-2025

Terms | Privacy