modiloader | 6998526609f3824e0c1a02ad8a4a070f90d2c8f11fcf716de77ec7ed5075a1eb | Triage

Submit
Reports

Overview

overview

Static

static

3

ceddeaf84a...18.exe

windows7-x64

ceddeaf84a...18.exe

windows10-2004-x64

Sharing

General

Target

ceddeaf84a0ef1be3ce0fa46381d3edc_JaffaCakes118
Size

439KB
Sample

241206-y8qa6asjfl
MD5

ceddeaf84a0ef1be3ce0fa46381d3edc
SHA1

7a77f1c70a5bd8c9cc5ff8d87b5cb234d8b393e1
SHA256

6998526609f3824e0c1a02ad8a4a070f90d2c8f11fcf716de77ec7ed5075a1eb
SHA512

a664794316d85da8820a8a31e8a5027c13bcf03b19b8e989d01c6e544b2346577495b5421a1bf1ead907fe088c083ba5b55d64ffd67a4421722dd3c660cab7f9
SSDEEP

12288:5YW60lT93GW9KyPWFa+49xyENWEHNKnRPHFar3kwTrPLK7:TfV9bCa+4xWEHNKnZ3wTr27

Score

10^/10

modiloader discovery trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

ceddeaf84a0ef1be3ce0fa46381d3edc_JaffaCakes118.exe

Resource

win7-20240708-en

modiloader discovery trojan

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral2

Sample

ceddeaf84a0ef1be3ce0fa46381d3edc_JaffaCakes118.exe

Resource

win10v2004-20241007-en

modiloader discovery trojan

windows10-2004-x64

10 signatures

150 seconds

Malware Config

Targets

- Target
  
  ceddeaf84a0ef1be3ce0fa46381d3edc_JaffaCakes118
- Size
  
  439KB
- MD5
  
  ceddeaf84a0ef1be3ce0fa46381d3edc
- SHA1
  
  7a77f1c70a5bd8c9cc5ff8d87b5cb234d8b393e1
- SHA256
  
  6998526609f3824e0c1a02ad8a4a070f90d2c8f11fcf716de77ec7ed5075a1eb
- SHA512
  
  a664794316d85da8820a8a31e8a5027c13bcf03b19b8e989d01c6e544b2346577495b5421a1bf1ead907fe088c083ba5b55d64ffd67a4421722dd3c660cab7f9
- SSDEEP
  
  12288:5YW60lT93GW9KyPWFa+49xyENWEHNKnRPHFar3kwTrPLK7:TfV9bCa+4xWEHNKnZ3wTr27
Score

10^/10

modiloader discovery trojan
- ModiLoader, DBatLoader
  ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
  trojan modiloader
- Modiloader family
  modiloader
- ModiLoader Second Stage
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

modiloaderdiscoverytrojan

behavioral2

modiloaderdiscoverytrojan

© 2018-2025

Terms | Privacy