modiloader | 11c66358b5f9cdcd4c407508a77b07a9b55afa9264597d2d7f04e9f83b2776c5 | Triage

Sharing

General

Target

JaffaCakes118_6a2b00af0758da3c1cae9b0f7fa4edb9
Size

317KB
Sample

250103-evgbjsyphv
MD5

6a2b00af0758da3c1cae9b0f7fa4edb9
SHA1

00d18f20d43dadc383b8372027fbc7babb2ec3d8
SHA256

11c66358b5f9cdcd4c407508a77b07a9b55afa9264597d2d7f04e9f83b2776c5
SHA512

34b1a66ebb5be4fabadf17ffdc64dfa31865139a62f0ce5804122dcdf018e6815387f80565884a8457f2807b172c995408997e1f51b4432d6155f51a6baf73b7
SSDEEP

6144:iIrPj0NmWtNa1QHoSZZwGTygc2Wzqfrum3ZZ5+oxDIFS0cGqcFxHT:iq0NxqKoSZNTyqju+v5PxDPfjc/HT

Score

10^/10

modiloader discovery evasion trojan upx

Malware Config

Targets

- Target
  
  JaffaCakes118_6a2b00af0758da3c1cae9b0f7fa4edb9
- Size
  
  317KB
- MD5
  
  6a2b00af0758da3c1cae9b0f7fa4edb9
- SHA1
  
  00d18f20d43dadc383b8372027fbc7babb2ec3d8
- SHA256
  
  11c66358b5f9cdcd4c407508a77b07a9b55afa9264597d2d7f04e9f83b2776c5
- SHA512
  
  34b1a66ebb5be4fabadf17ffdc64dfa31865139a62f0ce5804122dcdf018e6815387f80565884a8457f2807b172c995408997e1f51b4432d6155f51a6baf73b7
- SSDEEP
  
  6144:iIrPj0NmWtNa1QHoSZZwGTygc2Wzqfrum3ZZ5+oxDIFS0cGqcFxHT:iq0NxqKoSZNTyqju+v5PxDPfjc/HT
Score

10^/10

modiloader discovery evasion trojan upx
- ModiLoader, DBatLoader
  ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
  trojan modiloader
- Modiloader family
  modiloader
- UAC bypass
  evasion trojan
- ModiLoader Second Stage
- Loads dropped DLL
- Checks whether UAC is enabled
  evasion trojan
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

modiloaderdiscoveryevasiontrojanupx