modiloader | 80b3e72e4afc7b991d75c4856b3dda29af7e40c89359e7b785313433370af74f

General

Target

JaffaCakes118_0052736572d7fda392ee10163208ade6
Size

2.0MB
Sample

250120-18vxraslew
MD5

0052736572d7fda392ee10163208ade6
SHA1

8e293b8fb835f147b9c26593203070d0120c41d2
SHA256

80b3e72e4afc7b991d75c4856b3dda29af7e40c89359e7b785313433370af74f
SHA512

1f9bf6d13796a9b07f6db6720a982f1a7b0457665709d1439bb8e954c584327fa9862f99a7c1d7db526be3d6041bc8d2cc124454ec01381f125557b75c6bcdde
SSDEEP

49152:gTqpChd62wwRSzHn8nv3Io8PU/F/9MMMMMMMMMMMMMMMMMMMsXrIqOLQ:KmS+H8nv3IjGFMMMMMMMMMMMMMMMMMMr

Score

10^/10

Malware Config

Targets

- Target
  
  JaffaCakes118_0052736572d7fda392ee10163208ade6
- Size
  
  2.0MB
- MD5
  
  0052736572d7fda392ee10163208ade6
- SHA1
  
  8e293b8fb835f147b9c26593203070d0120c41d2
- SHA256
  
  80b3e72e4afc7b991d75c4856b3dda29af7e40c89359e7b785313433370af74f
- SHA512
  
  1f9bf6d13796a9b07f6db6720a982f1a7b0457665709d1439bb8e954c584327fa9862f99a7c1d7db526be3d6041bc8d2cc124454ec01381f125557b75c6bcdde
- SSDEEP
  
  49152:gTqpChd62wwRSzHn8nv3Io8PU/F/9MMMMMMMMMMMMMMMMMMMsXrIqOLQ:KmS+H8nv3IjGFMMMMMMMMMMMMMMMMMMr
Score

10^/10

modiloader defense_evasion discovery themida trojan upx
- ModiLoader, DBatLoader
  ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
  trojan modiloader
- Modiloader family
  modiloader
- ModiLoader Second Stage
- Executes dropped EXE
- Loads dropped DLL
- Themida packer
  Detects Themida, an advanced Windows software protection system.
  themida
- Checks whether UAC is enabled
  defense_evasion trojan
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

2

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

ModiLoader, DBatLoader

Modiloader family

ModiLoader Second Stage

Executes dropped EXE

Loads dropped DLL

Themida packer

Checks whether UAC is enabled

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2