modiloader | 1e50e9396f91b7b2a305aa54998651f4bc02d5b6658b3761e10686de39063b59 | Triage

Submit
Reports

Overview

overview

Static

static

9c38f66eb7...18.exe

windows7-x64

9c38f66eb7...18.exe

windows10-2004-x64

Sharing

General

Target

9c38f66eb7d639a0852d4f2a215e2847_JaffaCakes118
Size

135KB
Sample

241125-sdde8aslbz
MD5

9c38f66eb7d639a0852d4f2a215e2847
SHA1

5b0d0cb1794fc131989d351140f35e3db233a6e1
SHA256

1e50e9396f91b7b2a305aa54998651f4bc02d5b6658b3761e10686de39063b59
SHA512

ac7cab30df701e526e5a33cac39969dd5bb1ba8b8f0cbff13ca946e24efe8eacca95da5134a7fe63888271d5762c4b9509820d2c0fed47425ca9878686baec03
SSDEEP

3072:jL7GtpOfw/Y7ZwvlA70eYGgw3mcwJ5IAgPhIcr6BR516gs2RR:fyMw/d7e6MmfJ5IAEIBhRR

Score

10^/10

modiloader discovery persistence trojan

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

9c38f66eb7d639a0852d4f2a215e2847_JaffaCakes118.exe

Resource

win7-20240903-en

modiloader discovery persistence trojan

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral2

Sample

9c38f66eb7d639a0852d4f2a215e2847_JaffaCakes118.exe

Resource

win10v2004-20241007-en

modiloader discovery persistence trojan

windows10-2004-x64

8 signatures

150 seconds

Malware Config

Targets

- Target
  
  9c38f66eb7d639a0852d4f2a215e2847_JaffaCakes118
- Size
  
  135KB
- MD5
  
  9c38f66eb7d639a0852d4f2a215e2847
- SHA1
  
  5b0d0cb1794fc131989d351140f35e3db233a6e1
- SHA256
  
  1e50e9396f91b7b2a305aa54998651f4bc02d5b6658b3761e10686de39063b59
- SHA512
  
  ac7cab30df701e526e5a33cac39969dd5bb1ba8b8f0cbff13ca946e24efe8eacca95da5134a7fe63888271d5762c4b9509820d2c0fed47425ca9878686baec03
- SSDEEP
  
  3072:jL7GtpOfw/Y7ZwvlA70eYGgw3mcwJ5IAgPhIcr6BR516gs2RR:fyMw/d7e6MmfJ5IAEIBhRR
Score

10^/10

modiloader discovery persistence trojan
- ModiLoader, DBatLoader
  ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
  trojan modiloader
- Modiloader family
  modiloader
- ModiLoader Second Stage
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

modiloaderdiscoverypersistencetrojan

behavioral2

modiloaderdiscoverypersistencetrojan

© 2018-2025

Terms | Privacy