modiloader | d0e7584ca886eddb2fb60322fd1a84157495c86439ea02330ed8cf3d12001bb9

Analysis

max time kernel
133s
max time network
104s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
27-06-2024 18:31

Target

170fda7bee932617f818ff3bdc23f715_JaffaCakes118.exe
Size

64KB
MD5

170fda7bee932617f818ff3bdc23f715
SHA1

c46e1a4873b9bdf90fe788126c76a91bfc9107b2
SHA256

d0e7584ca886eddb2fb60322fd1a84157495c86439ea02330ed8cf3d12001bb9
SHA512

7bc15fae33b9a1188ac48211c57ababd11eb31b7d16f72068b7b81d10211f9ecc2ee3996b60dc75b1b0a756a0603ced07650ecc54dac89dd4d92825f6bce3f4a
SSDEEP

768:WPbFslh9MOP3bNS0E5cigez2plxD342vBShSrMJRuQDxzy+kZaIOP8nRrsD9WL3t:qkh9pBESK2vp4DRWZaIOescL3e8xxD

Score

10^/10

ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
trojan modiloader

ModiLoader Second Stage 2 IoCs

Processes:

resource	yara_rule
behavioral2/memory/4560-0-0x0000000000400000-0x0000000000414000-memory.dmp	modiloader_stage2
behavioral2/memory/4560-1-0x0000000000400000-0x0000000000414000-memory.dmp	modiloader_stage2

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2372 4560 WerFault.exe 170fda7bee932617f818ff3bdc23f715_JaffaCakes118.exe

pid	pid_target	process	target process
2372	4560	WerFault.exe	170fda7bee932617f818ff3bdc23f715_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\170fda7bee932617f818ff3bdc23f715_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\170fda7bee932617f818ff3bdc23f715_JaffaCakes118.exe"
1⤵
PID:4560

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4560 -s 388
2⤵
- Program crash
PID:2372

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4560 -ip 4560
1⤵
PID:1356

memory/4560-0-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/4560-1-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download