modiloader | dd48956600e9edd1e5e917a380013e5fe249a6704bb3ed730d0a4158c3d4379b

General

Target

cc81c48dade59b365af47f88d73d11d3_JaffaCakes118
Size

705KB
Sample

241206-mjnv9ayndk
MD5

cc81c48dade59b365af47f88d73d11d3
SHA1

9f1f7268a3cb48a4d182d17f4995db9551a50cc3
SHA256

dd48956600e9edd1e5e917a380013e5fe249a6704bb3ed730d0a4158c3d4379b
SHA512

8142200accf60ec17c0f9f5b30a03d65a4aaca628293857cad2bccf2b2761493da862cc468dc7b90be4c3858dbe100b02bcd4f289663afb1d2d30836b56c6e9a
SSDEEP

12288:yRjUrkgyBkGCt9y341FNdRGrlPFi0BNdgDbRwC3duXLE4dsTaHK:yBsk3yyofR0ri0Bs3VdvssTaq

Score

10^/10

Malware Config

Targets

- Target
  
  cc81c48dade59b365af47f88d73d11d3_JaffaCakes118
- Size
  
  705KB
- MD5
  
  cc81c48dade59b365af47f88d73d11d3
- SHA1
  
  9f1f7268a3cb48a4d182d17f4995db9551a50cc3
- SHA256
  
  dd48956600e9edd1e5e917a380013e5fe249a6704bb3ed730d0a4158c3d4379b
- SHA512
  
  8142200accf60ec17c0f9f5b30a03d65a4aaca628293857cad2bccf2b2761493da862cc468dc7b90be4c3858dbe100b02bcd4f289663afb1d2d30836b56c6e9a
- SSDEEP
  
  12288:yRjUrkgyBkGCt9y341FNdRGrlPFi0BNdgDbRwC3duXLE4dsTaHK:yBsk3yyofR0ri0Bs3VdvssTaq
Score

10^/10

modiloader discovery trojan
- ModiLoader, DBatLoader
  ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
  trojan modiloader
- Modiloader family
  modiloader
- ModiLoader Second Stage
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1

T1112

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

ModiLoader, DBatLoader

Modiloader family

ModiLoader Second Stage

Executes dropped EXE

Loads dropped DLL

Drops file in System32 directory

Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2