modiloader | 1ab83da68b83c8fbebaecf09ceadcd87138f677536040514b2246a2e01e6e930 | Triage

Submit
Reports

Overview

overview

Static

static

3

c60d895fee...18.exe

windows7-x64

c60d895fee...18.exe

windows10-2004-x64

Sharing

General

Target

c60d895feed337d028995c1e3328b923_JaffaCakes118
Size

140KB
Sample

241205-fs3x7szpbx
MD5

c60d895feed337d028995c1e3328b923
SHA1

d1f6363dfcdd9a4d9c474b33fd273c98cc462826
SHA256

1ab83da68b83c8fbebaecf09ceadcd87138f677536040514b2246a2e01e6e930
SHA512

478eb1711b1e906ce64f4e763a863fc869da43800d26f2b35ec1686b9f66d2b721b4ab20597dd38bc1580b10fedc7747ce2d15ff015e5c6fc27c64241f45579d
SSDEEP

3072:xb16nUz43Mo4WTz2UapHcbmZ8dZ5Fm54Ad8cvHXN/JTy/jpW61d3:xb16nP3hu/cbFdZ5Fm575vHX3e/193

Score

10^/10

modiloader discovery trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

c60d895feed337d028995c1e3328b923_JaffaCakes118.exe

Resource

win7-20240729-en

modiloader discovery trojan

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

c60d895feed337d028995c1e3328b923_JaffaCakes118.exe

Resource

win10v2004-20241007-en

modiloader discovery trojan

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  c60d895feed337d028995c1e3328b923_JaffaCakes118
- Size
  
  140KB
- MD5
  
  c60d895feed337d028995c1e3328b923
- SHA1
  
  d1f6363dfcdd9a4d9c474b33fd273c98cc462826
- SHA256
  
  1ab83da68b83c8fbebaecf09ceadcd87138f677536040514b2246a2e01e6e930
- SHA512
  
  478eb1711b1e906ce64f4e763a863fc869da43800d26f2b35ec1686b9f66d2b721b4ab20597dd38bc1580b10fedc7747ce2d15ff015e5c6fc27c64241f45579d
- SSDEEP
  
  3072:xb16nUz43Mo4WTz2UapHcbmZ8dZ5Fm54Ad8cvHXN/JTy/jpW61d3:xb16nP3hu/cbFdZ5Fm575vHX3e/193
Score

10^/10

modiloader discovery trojan
- ModiLoader, DBatLoader
  ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
  trojan modiloader
- Modiloader family
  modiloader
- ModiLoader Second Stage
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

modiloaderdiscoverytrojan

behavioral2

modiloaderdiscoverytrojan

© 2018-2025

Terms | Privacy