modiloader | dafa0160ac5f814b90db131d77d29fa16b68d76df3243dafbb0a51a968e725cd | Triage

Submit
Reports

Overview

overview

Static

static

3

d78674a0b1...18.exe

windows7-x64

d78674a0b1...18.exe

windows10-2004-x64

Sharing

General

Target

d78674a0b1e4d82307e8ec37a70bdbf2_JaffaCakes118
Size

801KB
Sample

241208-rvl81swmby
MD5

d78674a0b1e4d82307e8ec37a70bdbf2
SHA1

8cb6cb00ac93481527492b374c43bfb070db164b
SHA256

dafa0160ac5f814b90db131d77d29fa16b68d76df3243dafbb0a51a968e725cd
SHA512

228a48242b62eeeb1697a5c55e431745cd61f5cbb4617dac76cac6d54403a71d527891f5f9e5f23ba312d59037ed3a0d660d7d1f3a43407267829880902a54c2
SSDEEP

24576:D+pCK0Adttc//////RTJ5cpbpE5M88FTdI+r7lquHce:q7tdHc//////RTJ5ypE5MRF51r7dce

Score

10^/10

modiloader discovery trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

d78674a0b1e4d82307e8ec37a70bdbf2_JaffaCakes118.exe

Resource

win7-20241010-en

modiloader discovery trojan

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral2

Sample

d78674a0b1e4d82307e8ec37a70bdbf2_JaffaCakes118.exe

Resource

win10v2004-20241007-en

modiloader discovery trojan

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  d78674a0b1e4d82307e8ec37a70bdbf2_JaffaCakes118
- Size
  
  801KB
- MD5
  
  d78674a0b1e4d82307e8ec37a70bdbf2
- SHA1
  
  8cb6cb00ac93481527492b374c43bfb070db164b
- SHA256
  
  dafa0160ac5f814b90db131d77d29fa16b68d76df3243dafbb0a51a968e725cd
- SHA512
  
  228a48242b62eeeb1697a5c55e431745cd61f5cbb4617dac76cac6d54403a71d527891f5f9e5f23ba312d59037ed3a0d660d7d1f3a43407267829880902a54c2
- SSDEEP
  
  24576:D+pCK0Adttc//////RTJ5cpbpE5M88FTdI+r7lquHce:q7tdHc//////RTJ5ypE5MRF51r7dce
Score

10^/10

modiloader discovery trojan
- ModiLoader, DBatLoader
  ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
  trojan modiloader
- Modiloader family
  modiloader
- ModiLoader Second Stage
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

modiloaderdiscoverytrojan

behavioral2

modiloaderdiscoverytrojan

© 2018-2025

Terms | Privacy