modiloader | 623d5cc3bce00dae7d418df7e0aae677c4559d4c319aa9b6835f2963a58912a4 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

e0705c0d81...18.dll

windows7-x64

e0705c0d81...18.dll

windows10-2004-x64

8

Sharing

General

Target

e0705c0d813c8ff7fabb4cb307559a24_JaffaCakes118
Size

27KB
Sample

241211-h9h1gaxngj
MD5

e0705c0d813c8ff7fabb4cb307559a24
SHA1

abf37ed461f76f4b1681f5e230adfbbc0e9a5028
SHA256

623d5cc3bce00dae7d418df7e0aae677c4559d4c319aa9b6835f2963a58912a4
SHA512

7cc9d82e7e33040262607f446729b7895077c3eef6c4390f3ebf26a3558aa9105304dd7b85fda73335fd4e06fa644aea2d13e969cd152c388b78f6214007b267
SSDEEP

384:2AAHxUSCqujwHKnGQmQwt83EEPT9/qgfi1vOpBlbQtylykECkfm6TJqCAzK9Enmv:YKSCquMH0GQUs9/Hq5OpBlkoPpm

Score

10^/10

modiloader discovery trojan

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

e0705c0d813c8ff7fabb4cb307559a24_JaffaCakes118.dll

Resource

win7-20240708-en

modiloader discovery trojan

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

e0705c0d813c8ff7fabb4cb307559a24_JaffaCakes118.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

5 signatures

150 seconds

Malware Config

Targets

- Target
  
  e0705c0d813c8ff7fabb4cb307559a24_JaffaCakes118
- Size
  
  27KB
- MD5
  
  e0705c0d813c8ff7fabb4cb307559a24
- SHA1
  
  abf37ed461f76f4b1681f5e230adfbbc0e9a5028
- SHA256
  
  623d5cc3bce00dae7d418df7e0aae677c4559d4c319aa9b6835f2963a58912a4
- SHA512
  
  7cc9d82e7e33040262607f446729b7895077c3eef6c4390f3ebf26a3558aa9105304dd7b85fda73335fd4e06fa644aea2d13e969cd152c388b78f6214007b267
- SSDEEP
  
  384:2AAHxUSCqujwHKnGQmQwt83EEPT9/qgfi1vOpBlbQtylykECkfm6TJqCAzK9Enmv:YKSCquMH0GQUs9/Hq5OpBlkoPpm
Score

10^/10

modiloader discovery trojan
- ModiLoader, DBatLoader
  ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
  trojan modiloader
- Modiloader family
  modiloader
- ModiLoader Second Stage
- Blocklisted process makes network request
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

modiloaderdiscoverytrojan

behavioral2

© 2018-2025

Terms | Privacy