modiloader | aec492e72c472944b15204ec7aa8a34580d4844ccf8c3eb539ed4516362c4eeb

General

Target

JaffaCakes118_2ff44f1d1d9496248e0b697ec4c84dcd
Size

584KB
Sample

250113-1tcgvs1ldk
MD5

2ff44f1d1d9496248e0b697ec4c84dcd
SHA1

a945b36327b71584aa493c4513a57e4c08a23485
SHA256

aec492e72c472944b15204ec7aa8a34580d4844ccf8c3eb539ed4516362c4eeb
SHA512

f2365d61205b14d78c1b721fcbe05f9d66e18529fb5e712026267a24b84ed56f5c552f007ab3780a109e42a4f73434661825581e8bfba0e71594eef19c57e149
SSDEEP

12288:sq5LPiSDHPWE8TRg0xkl0xCVCv1fMBitD52acOoI46emcn:szSbPWE8TR1A5y2KSF

Score

10^/10

Malware Config

Targets

- Target
  
  JaffaCakes118_2ff44f1d1d9496248e0b697ec4c84dcd
- Size
  
  584KB
- MD5
  
  2ff44f1d1d9496248e0b697ec4c84dcd
- SHA1
  
  a945b36327b71584aa493c4513a57e4c08a23485
- SHA256
  
  aec492e72c472944b15204ec7aa8a34580d4844ccf8c3eb539ed4516362c4eeb
- SHA512
  
  f2365d61205b14d78c1b721fcbe05f9d66e18529fb5e712026267a24b84ed56f5c552f007ab3780a109e42a4f73434661825581e8bfba0e71594eef19c57e149
- SSDEEP
  
  12288:sq5LPiSDHPWE8TRg0xkl0xCVCv1fMBitD52acOoI46emcn:szSbPWE8TR1A5y2KSF
Score

10^/10

modiloader discovery evasion trojan
- ModiLoader, DBatLoader
  ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
  trojan modiloader
- Modiloader family
  modiloader
- ModiLoader Second Stage
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1

T1012

System Information Discovery

3

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

ModiLoader, DBatLoader

Modiloader family

ModiLoader Second Stage

Checks computer location settings

Executes dropped EXE

Loads dropped DLL

Checks whether UAC is enabled

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2