modiloader | ca8ad845284b5782bf5bc5206b416e2fabb1d8d145d2314d5c4befeffa83b5e1

General

Target

JaffaCakes118_19210bc206b91e9564e8326362924474
Size

157KB
Sample

250123-t531maxlak
MD5

19210bc206b91e9564e8326362924474
SHA1

9c54823ae87b3798e14c57e07676e5c8057c889c
SHA256

ca8ad845284b5782bf5bc5206b416e2fabb1d8d145d2314d5c4befeffa83b5e1
SHA512

05d19cebb414b987de7d228788e793ddb76d35c0ba04beba924703daa618f1346eb800459cbb4a227b200a2c6f015fe1e0e02412498ea9aa1d97204fb21ef455
SSDEEP

3072:eSMt+tk5U4VYmEYOsYEzIJ0REPtJQLHoGZ3wNrqIhh28ENZ0o:Qtkk5U6Y0gLJQL33wN+Ih284ZD

Score

10^/10

Malware Config

Targets

- Target
  
  JaffaCakes118_19210bc206b91e9564e8326362924474
- Size
  
  157KB
- MD5
  
  19210bc206b91e9564e8326362924474
- SHA1
  
  9c54823ae87b3798e14c57e07676e5c8057c889c
- SHA256
  
  ca8ad845284b5782bf5bc5206b416e2fabb1d8d145d2314d5c4befeffa83b5e1
- SHA512
  
  05d19cebb414b987de7d228788e793ddb76d35c0ba04beba924703daa618f1346eb800459cbb4a227b200a2c6f015fe1e0e02412498ea9aa1d97204fb21ef455
- SSDEEP
  
  3072:eSMt+tk5U4VYmEYOsYEzIJ0REPtJQLHoGZ3wNrqIhh28ENZ0o:Qtkk5U6Y0gLJQL33wN+Ih284ZD
Score

10^/10

modiloader defense_evasion discovery trojan upx
- ModiLoader, DBatLoader
  ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
  trojan modiloader
- Modiloader family
  modiloader
- ModiLoader Second Stage
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
  defense_evasion trojan
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1

T1012

System Information Discovery

3

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

ModiLoader, DBatLoader

Modiloader family

ModiLoader Second Stage

Checks computer location settings

Executes dropped EXE

Loads dropped DLL

Checks whether UAC is enabled

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2