modiloader | 11cc92c25050e84fa1e0edb5f9825936ee277759abbc83dec2a440ea33349073 | Triage

Submit
Reports

Overview

overview

Static

static

3

998baebc78...18.exe

windows7-x64

998baebc78...18.exe

windows10-2004-x64

Sharing

General

Target

998baebc78538f8e85ae597c7a9504c3_JaffaCakes118
Size

624KB
Sample

241125-gc1cta1pcz
MD5

998baebc78538f8e85ae597c7a9504c3
SHA1

f03df28c0a81951e2d50ef459ea89a0b61f3bc75
SHA256

11cc92c25050e84fa1e0edb5f9825936ee277759abbc83dec2a440ea33349073
SHA512

6c3e684d9943531fac46972c27a10dc44b763918cf4775edee2544bd3c24a4a992fea015a468b14841bf26ddea2b9cdaaba4d8375536d2af1a322c45cf5ee178
SSDEEP

12288:Jv2H8dYzmUFqcr5i9Lx2uM5oslDXfp47pt3bJJvH:N2cdYzmUFH1AQ5oslTa7pPJvH

Score

10^/10

modiloader discovery trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

998baebc78538f8e85ae597c7a9504c3_JaffaCakes118.exe

Resource

win7-20240903-en

modiloader discovery trojan

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

998baebc78538f8e85ae597c7a9504c3_JaffaCakes118.exe

Resource

win10v2004-20241007-en

modiloader discovery trojan

windows10-2004-x64

8 signatures

150 seconds

Malware Config

Targets

- Target
  
  998baebc78538f8e85ae597c7a9504c3_JaffaCakes118
- Size
  
  624KB
- MD5
  
  998baebc78538f8e85ae597c7a9504c3
- SHA1
  
  f03df28c0a81951e2d50ef459ea89a0b61f3bc75
- SHA256
  
  11cc92c25050e84fa1e0edb5f9825936ee277759abbc83dec2a440ea33349073
- SHA512
  
  6c3e684d9943531fac46972c27a10dc44b763918cf4775edee2544bd3c24a4a992fea015a468b14841bf26ddea2b9cdaaba4d8375536d2af1a322c45cf5ee178
- SSDEEP
  
  12288:Jv2H8dYzmUFqcr5i9Lx2uM5oslDXfp47pt3bJJvH:N2cdYzmUFH1AQ5oslTa7pPJvH
Score

10^/10

modiloader discovery trojan
- ModiLoader, DBatLoader
  ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
  trojan modiloader
- Modiloader family
  modiloader
- ModiLoader Second Stage
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

modiloaderdiscoverytrojan

behavioral2

modiloaderdiscoverytrojan

© 2018-2024

Terms | Privacy