modiloader | 1a16b2353a36b90d07824b8782773d987ca865a3065c4b3d9bcfde934f95263a

General

Target

af45db729ef679a798dd9ec7903ea234_JaffaCakes118
Size

156KB
Sample

241129-gg9r2svjgq
MD5

af45db729ef679a798dd9ec7903ea234
SHA1

ac1ec1d6c3df9370dede6f6bc84ca4472466b871
SHA256

1a16b2353a36b90d07824b8782773d987ca865a3065c4b3d9bcfde934f95263a
SHA512

25d4cb1470bd77b1f5f4fa265b1664bd15d90b584264a338b8c98b5583f3e9d6e4e0854d4830f3f4579ccdfeb3bd806e9e23431b42634401f04fb5200c1b84c4
SSDEEP

3072:UYAShmen0aSSQXMBkoZLok6mgAQKZaq69nGbSAsU6sURK2Ta0O0rtvG+GAiXUg5V:BB08Q8BflQlqanG2vU6sohFg5m

Score

10^/10

Malware Config

Targets

- Target
  
  af45db729ef679a798dd9ec7903ea234_JaffaCakes118
- Size
  
  156KB
- MD5
  
  af45db729ef679a798dd9ec7903ea234
- SHA1
  
  ac1ec1d6c3df9370dede6f6bc84ca4472466b871
- SHA256
  
  1a16b2353a36b90d07824b8782773d987ca865a3065c4b3d9bcfde934f95263a
- SHA512
  
  25d4cb1470bd77b1f5f4fa265b1664bd15d90b584264a338b8c98b5583f3e9d6e4e0854d4830f3f4579ccdfeb3bd806e9e23431b42634401f04fb5200c1b84c4
- SSDEEP
  
  3072:UYAShmen0aSSQXMBkoZLok6mgAQKZaq69nGbSAsU6sURK2Ta0O0rtvG+GAiXUg5V:BB08Q8BflQlqanG2vU6sohFg5m
Score

10^/10

modiloader defense_evasion discovery trojan upx
- ModiLoader, DBatLoader
  ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
  trojan modiloader
- Modiloader family
  modiloader
- ModiLoader Second Stage
- Deletes itself
- Executes dropped EXE
- Indicator Removal: File Deletion
  Adversaries may delete files left behind by the actions of their intrusion activity.
  defense_evasion
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Indicator Removal

1

T1070

File Deletion

1

T1070.004

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

ModiLoader, DBatLoader

Modiloader family

ModiLoader Second Stage

Deletes itself

Executes dropped EXE

Indicator Removal: File Deletion

Drops file in System32 directory

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2