modiloader | c5c4d407089d0103018235ac0d079b3d57923e6dcd94d17cf06cda138b38ab29

General

Target

JaffaCakes118_692cd0a0b5d8fb53dbdbb993409e507a
Size

656KB
Sample

250103-aymwaavpfr
MD5

692cd0a0b5d8fb53dbdbb993409e507a
SHA1

25bac15e915bbeabfa4985077c9e6b9292d3dbda
SHA256

c5c4d407089d0103018235ac0d079b3d57923e6dcd94d17cf06cda138b38ab29
SHA512

9b44230a4c1852195ab3300ca80923ba42ba15b851bd0cda874c2d8b6863650fb1bf7dc66f6779b78e8c57217c8ce7a3a006485aa84bb7db86f3d1ec0eb1806c
SSDEEP

12288:hBMmKGnhDT+JlCdjpw8T1uxp62KW8CcCzyU56RZv+F4a4:XMmnDC+d28Ev8W8CcQy2U1q4p

Score

10^/10

Malware Config

Targets

- Target
  
  JaffaCakes118_692cd0a0b5d8fb53dbdbb993409e507a
- Size
  
  656KB
- MD5
  
  692cd0a0b5d8fb53dbdbb993409e507a
- SHA1
  
  25bac15e915bbeabfa4985077c9e6b9292d3dbda
- SHA256
  
  c5c4d407089d0103018235ac0d079b3d57923e6dcd94d17cf06cda138b38ab29
- SHA512
  
  9b44230a4c1852195ab3300ca80923ba42ba15b851bd0cda874c2d8b6863650fb1bf7dc66f6779b78e8c57217c8ce7a3a006485aa84bb7db86f3d1ec0eb1806c
- SSDEEP
  
  12288:hBMmKGnhDT+JlCdjpw8T1uxp62KW8CcCzyU56RZv+F4a4:XMmnDC+d28Ev8W8CcQy2U1q4p
Score

10^/10

modiloader discovery evasion trojan upx
- ModiLoader, DBatLoader
  ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
  trojan modiloader
- Modiloader family
  modiloader
- ModiLoader Second Stage
- Checks whether UAC is enabled
  evasion trojan
- AutoIT Executable
  AutoIT scripts compiled to PE executables.
- Suspicious use of SetThreadContext
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

2

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

ModiLoader, DBatLoader

Modiloader family

ModiLoader Second Stage

Checks whether UAC is enabled

AutoIT Executable

Suspicious use of SetThreadContext

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2