modiloader | abf0eaef698682a7279cfbedf6cadb8dfdc2e0f51f63c94f5eb5f81291eb53c2 | Triage

Submit
Reports

Overview

overview

Static

static

3

JaffaCakes...fb.exe

windows7-x64

JaffaCakes...fb.exe

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_2b029a5b9279fd3d0cb27a34af0a96fb
Size

1.0MB
Sample

250113-tlqaesxrd1
MD5

2b029a5b9279fd3d0cb27a34af0a96fb
SHA1

35552a28417d8f26aa842213d2eb40116c419bb0
SHA256

abf0eaef698682a7279cfbedf6cadb8dfdc2e0f51f63c94f5eb5f81291eb53c2
SHA512

ab0505dcf31436984de86633883af2f90e2367a28f4dcbfd0139b8bdcb42f5e9e3dcb77e1292fb74ad6437d6f3481921f21ca9bd6e47c20e98de0bd3b5594eb2
SSDEEP

24576:pO0ve+O4RyOoxXoKZVbB9uuhFMof2Xq8gn0Mmyp+R2mS:p5edBxtZN3F5fSqK6k2mS

Score

10^/10

modiloader bootkit discovery persistence trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_2b029a5b9279fd3d0cb27a34af0a96fb.exe

Resource

win7-20241023-en

modiloader bootkit discovery persistence trojan

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral2

Sample

JaffaCakes118_2b029a5b9279fd3d0cb27a34af0a96fb.exe

Resource

win10v2004-20241007-en

modiloader discovery trojan

windows10-2004-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_2b029a5b9279fd3d0cb27a34af0a96fb
- Size
  
  1.0MB
- MD5
  
  2b029a5b9279fd3d0cb27a34af0a96fb
- SHA1
  
  35552a28417d8f26aa842213d2eb40116c419bb0
- SHA256
  
  abf0eaef698682a7279cfbedf6cadb8dfdc2e0f51f63c94f5eb5f81291eb53c2
- SHA512
  
  ab0505dcf31436984de86633883af2f90e2367a28f4dcbfd0139b8bdcb42f5e9e3dcb77e1292fb74ad6437d6f3481921f21ca9bd6e47c20e98de0bd3b5594eb2
- SSDEEP
  
  24576:pO0ve+O4RyOoxXoKZVbB9uuhFMof2Xq8gn0Mmyp+R2mS:p5edBxtZN3F5fSqK6k2mS
Score

10^/10

modiloader bootkit discovery persistence trojan
- ModiLoader, DBatLoader
  ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
  trojan modiloader
- Modiloader family
  modiloader
- ModiLoader Second Stage
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Pre-OS Boot

Bootkit

Privilege Escalation

Defense Evasion

Pre-OS Boot

Bootkit

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

modiloaderbootkitdiscoverypersistencetrojan

behavioral2

modiloaderdiscoverytrojan

© 2018-2025

Terms | Privacy