modiloader | 5af52adbb9589edeb9b7a2bf12e77812f74f5319304aeacc3566db285be31407 | Triage

Submit
Reports

Overview

overview

Static

static

3

fd038573f8...18.exe

windows7-x64

fd038573f8...18.exe

windows10-2004-x64

Sharing

General

Target

fd038573f8b207db97d463e0b5a0c1a3_JaffaCakes118
Size

782KB
Sample

241218-zazyda1qdl
MD5

fd038573f8b207db97d463e0b5a0c1a3
SHA1

3a025580afbacf2690f4ed7c833eaf3c338a2408
SHA256

5af52adbb9589edeb9b7a2bf12e77812f74f5319304aeacc3566db285be31407
SHA512

817779c30c460a86c9fab441cbaef2fc58c59330ab3a8462d4e1a3c4e54da87029d1ac6b2e3c892a836097385521bcae97235e20d7930df8492ce2b99ceee8a9
SSDEEP

12288:GCyh1RvrhAV2+GSH+Hobb8sxWUtJJrJ4NDd72mLsDQj0MnsyR85AWlqJoT:VyhHhAVYjG/XJ4NB72mIcj/S5AWl5

Score

10^/10

modiloader discovery trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

fd038573f8b207db97d463e0b5a0c1a3_JaffaCakes118.exe

Resource

win7-20241023-en

modiloader discovery trojan

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

fd038573f8b207db97d463e0b5a0c1a3_JaffaCakes118.exe

Resource

win10v2004-20241007-en

modiloader discovery trojan

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  fd038573f8b207db97d463e0b5a0c1a3_JaffaCakes118
- Size
  
  782KB
- MD5
  
  fd038573f8b207db97d463e0b5a0c1a3
- SHA1
  
  3a025580afbacf2690f4ed7c833eaf3c338a2408
- SHA256
  
  5af52adbb9589edeb9b7a2bf12e77812f74f5319304aeacc3566db285be31407
- SHA512
  
  817779c30c460a86c9fab441cbaef2fc58c59330ab3a8462d4e1a3c4e54da87029d1ac6b2e3c892a836097385521bcae97235e20d7930df8492ce2b99ceee8a9
- SSDEEP
  
  12288:GCyh1RvrhAV2+GSH+Hobb8sxWUtJJrJ4NDd72mLsDQj0MnsyR85AWlqJoT:VyhHhAVYjG/XJ4NB72mIcj/S5AWl5
Score

10^/10

modiloader discovery trojan
- ModiLoader, DBatLoader
  ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
  trojan modiloader
- Modiloader family
  modiloader
- ModiLoader Second Stage
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

modiloaderdiscoverytrojan

behavioral2

modiloaderdiscoverytrojan

© 2018-2024

Terms | Privacy