modiloader | a634017b39706464ec4771e99d1d84b7fd8da740cec04592d5f4c8537c484e17 | Triage

Submit
Reports

Overview

overview

Static

static

ff791b8d60...18.exe

windows7-x64

ff791b8d60...18.exe

windows10-2004-x64

Sharing

General

Target

ff791b8d6011a1cfd15342b661deb0d2_JaffaCakes118
Size

26KB
Sample

241219-mdck2azqax
MD5

ff791b8d6011a1cfd15342b661deb0d2
SHA1

dfa5b2d5f21ab73df052c91754ba3b47503500b0
SHA256

a634017b39706464ec4771e99d1d84b7fd8da740cec04592d5f4c8537c484e17
SHA512

4122fed34df6db9a8c0c18e2920906e86113c4c7099e8a42179f5406a4b6000a5d16568f419b3cf3b5fb4904a23939015a487b80c85f7ecc3ab5dbb541a7a801
SSDEEP

768:3Ltf0nqJ867HMDetiZRnjRTMF6W6I/Vi9ZPL:7DtDMDetiZRdTMkDDrT

Score

10^/10

modiloader discovery trojan upx

Static task

static1

4 signatures

Behavioral task

behavioral1

Sample

ff791b8d6011a1cfd15342b661deb0d2_JaffaCakes118.exe

Resource

win7-20241010-en

modiloader discovery trojan upx

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

ff791b8d6011a1cfd15342b661deb0d2_JaffaCakes118.exe

Resource

win10v2004-20241007-en

modiloader discovery trojan upx

windows10-2004-x64

10 signatures

150 seconds

Malware Config

Targets

- Target
  
  ff791b8d6011a1cfd15342b661deb0d2_JaffaCakes118
- Size
  
  26KB
- MD5
  
  ff791b8d6011a1cfd15342b661deb0d2
- SHA1
  
  dfa5b2d5f21ab73df052c91754ba3b47503500b0
- SHA256
  
  a634017b39706464ec4771e99d1d84b7fd8da740cec04592d5f4c8537c484e17
- SHA512
  
  4122fed34df6db9a8c0c18e2920906e86113c4c7099e8a42179f5406a4b6000a5d16568f419b3cf3b5fb4904a23939015a487b80c85f7ecc3ab5dbb541a7a801
- SSDEEP
  
  768:3Ltf0nqJ867HMDetiZRnjRTMF6W6I/Vi9ZPL:7DtDMDetiZRdTMkDDrT
Score

10^/10

modiloader discovery trojan upx
- ModiLoader, DBatLoader
  ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
  trojan modiloader
- Modiloader family
  modiloader
- ModiLoader Second Stage
- Drops file in System32 directory
- Suspicious use of SetThreadContext
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

modiloaderdiscoverytrojanupx

behavioral2

modiloaderdiscoverytrojanupx

© 2018-2024

Terms | Privacy