modiloader | f6089d373c2c8eb97fe89fe745fa36e4c6af13614819282487b95270bb232e5b | Triage

Submit
Reports

Overview

overview

Static

static

3

JaffaCakes...67.exe

windows7-x64

JaffaCakes...67.exe

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_0851dfedd16ecdb2d3c70f93cf2d5b67
Size

456KB
Sample

250121-3czxyawrhp
MD5

0851dfedd16ecdb2d3c70f93cf2d5b67
SHA1

40099eee9931e46c7d988811d3a3eff279c71cae
SHA256

f6089d373c2c8eb97fe89fe745fa36e4c6af13614819282487b95270bb232e5b
SHA512

5c6f89e48a964f16df8bc35178d91e8ca285bd2b33a8917d5f6f699d6450cfd16c777e202b4d4659654b1eeecf6f702c394a0e2660119d4350296ed07fc92bb4
SSDEEP

12288:epj96wRPlVsck52G7Mo8AeelA+JeB8VCFg:ihXLYM/icyVL

Score

10^/10

modiloader defense_evasion discovery trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_0851dfedd16ecdb2d3c70f93cf2d5b67.exe

Resource

win7-20241010-en

modiloader defense_evasion discovery trojan

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral2

Sample

JaffaCakes118_0851dfedd16ecdb2d3c70f93cf2d5b67.exe

Resource

win10v2004-20241007-en

modiloader defense_evasion discovery trojan

windows10-2004-x64

12 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_0851dfedd16ecdb2d3c70f93cf2d5b67
- Size
  
  456KB
- MD5
  
  0851dfedd16ecdb2d3c70f93cf2d5b67
- SHA1
  
  40099eee9931e46c7d988811d3a3eff279c71cae
- SHA256
  
  f6089d373c2c8eb97fe89fe745fa36e4c6af13614819282487b95270bb232e5b
- SHA512
  
  5c6f89e48a964f16df8bc35178d91e8ca285bd2b33a8917d5f6f699d6450cfd16c777e202b4d4659654b1eeecf6f702c394a0e2660119d4350296ed07fc92bb4
- SSDEEP
  
  12288:epj96wRPlVsck52G7Mo8AeelA+JeB8VCFg:ihXLYM/icyVL
Score

10^/10

modiloader defense_evasion discovery trojan
- ModiLoader, DBatLoader
  ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
  trojan modiloader
- Modiloader family
  modiloader
- ModiLoader Second Stage
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Checks whether UAC is enabled
  defense_evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

modiloaderdefense_evasiondiscoverytrojan

behavioral2

modiloaderdefense_evasiondiscoverytrojan

© 2018-2025

Terms | Privacy