modiloader | 3e7698244536ff994233f71337beb9876df9e512bfc55aede4405e4cea638f65 | Triage

Submit
Reports

Overview

overview

Static

static

5

3e76982445...65.exe

windows7-x64

3e76982445...65.exe

windows10-2004-x64

Sharing

General

Target

3e7698244536ff994233f71337beb9876df9e512bfc55aede4405e4cea638f65.exe
Size

394KB
Sample

241203-2xjk1strbq
MD5

d6dcbd3070348cdaaf7fd6272919a974
SHA1

41fce88bc52385c49429e477a85fd76e6e2e7c18
SHA256

3e7698244536ff994233f71337beb9876df9e512bfc55aede4405e4cea638f65
SHA512

13a4636cf7aaa8e2b976863f54f1728686a9e1e262bc5e48e9e8969ba8805dc89cfd9d92c1443f02e3e9d511150d19250c1932eb2ba084edec5e6d0fc3b17560
SSDEEP

6144:ElZ/zUMu4pDSxsCMRzf7x3SfS1JAzXBtL76lLIJM6h5nUZPdi:EHLUMuiv9RgfSjAzRtymMnFi

Score

10^/10

modiloader discovery evasion trojan upx

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

3e7698244536ff994233f71337beb9876df9e512bfc55aede4405e4cea638f65.exe

Resource

win7-20240903-en

modiloader discovery evasion trojan upx

windows7-x64

15 signatures

150 seconds

Behavioral task

behavioral2

Sample

3e7698244536ff994233f71337beb9876df9e512bfc55aede4405e4cea638f65.exe

Resource

win10v2004-20241007-en

modiloader discovery evasion trojan upx

windows10-2004-x64

15 signatures

150 seconds

Malware Config

Targets

- Target
  
  3e7698244536ff994233f71337beb9876df9e512bfc55aede4405e4cea638f65.exe
- Size
  
  394KB
- MD5
  
  d6dcbd3070348cdaaf7fd6272919a974
- SHA1
  
  41fce88bc52385c49429e477a85fd76e6e2e7c18
- SHA256
  
  3e7698244536ff994233f71337beb9876df9e512bfc55aede4405e4cea638f65
- SHA512
  
  13a4636cf7aaa8e2b976863f54f1728686a9e1e262bc5e48e9e8969ba8805dc89cfd9d92c1443f02e3e9d511150d19250c1932eb2ba084edec5e6d0fc3b17560
- SSDEEP
  
  6144:ElZ/zUMu4pDSxsCMRzf7x3SfS1JAzXBtL76lLIJM6h5nUZPdi:EHLUMuiv9RgfSjAzRtymMnFi
Score

10^/10

modiloader discovery evasion trojan upx
- ModiLoader, DBatLoader
  ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
  trojan modiloader
- Modiloader family
  modiloader
- UAC bypass
  evasion trojan
- ModiLoader Second Stage
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
  evasion trojan
- AutoIT Executable
  AutoIT scripts compiled to PE executables.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

modiloaderdiscoveryevasiontrojanupx

behavioral2

modiloaderdiscoveryevasiontrojanupx

© 2018-2025

Terms | Privacy