modiloader | d7efbd4154ee9fe8f1ff9ce18807821f14074bf7819cae292688b0e7f9aec13c | Triage

Submit
Reports

Overview

overview

Static

static

ff74531afa...18.exe

windows7-x64

ff74531afa...18.exe

windows10-2004-x64

Sharing

General

Target

ff74531afa985e271b982326c179fbf7_JaffaCakes118
Size

851KB
Sample

241219-l9f3nazrhj
MD5

ff74531afa985e271b982326c179fbf7
SHA1

fa3e69b042a0df6547cf5152c482fb2bf1838c3d
SHA256

d7efbd4154ee9fe8f1ff9ce18807821f14074bf7819cae292688b0e7f9aec13c
SHA512

463f6e0b57ae4c4733f3f3e74c2eda64ded983bbcb2d6a2e502fe6eb10d2e07236a1940db1026c4e58394eea14234eec55137e9d06281d19edca341d9bb7ce6b
SSDEEP

24576:ToK9U9Z5Y4+YSembcj3jtpTm7bUDWzPuNML851cM9wAYO:ToQU9Z5Y4+YSembcj3jjTcDuNML851c8

Score

10^/10

modiloader discovery trojan

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

ff74531afa985e271b982326c179fbf7_JaffaCakes118.exe

Resource

win7-20240903-en

modiloader discovery trojan

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

ff74531afa985e271b982326c179fbf7_JaffaCakes118.exe

Resource

win10v2004-20241007-en

modiloader discovery trojan

windows10-2004-x64

5 signatures

150 seconds

Malware Config

Targets

- Target
  
  ff74531afa985e271b982326c179fbf7_JaffaCakes118
- Size
  
  851KB
- MD5
  
  ff74531afa985e271b982326c179fbf7
- SHA1
  
  fa3e69b042a0df6547cf5152c482fb2bf1838c3d
- SHA256
  
  d7efbd4154ee9fe8f1ff9ce18807821f14074bf7819cae292688b0e7f9aec13c
- SHA512
  
  463f6e0b57ae4c4733f3f3e74c2eda64ded983bbcb2d6a2e502fe6eb10d2e07236a1940db1026c4e58394eea14234eec55137e9d06281d19edca341d9bb7ce6b
- SSDEEP
  
  24576:ToK9U9Z5Y4+YSembcj3jtpTm7bUDWzPuNML851cM9wAYO:ToQU9Z5Y4+YSembcj3jjTcDuNML851c8
Score

10^/10

modiloader discovery trojan
- ModiLoader, DBatLoader
  ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
  trojan modiloader
- Modiloader family
  modiloader
- ModiLoader Second Stage
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

modiloaderdiscoverytrojan

behavioral2

modiloaderdiscoverytrojan

© 2018-2024

Terms | Privacy