moda1.exe

Classification: Malicious

moda1.exe is a trojan (Windows executable, 11.0 KB). Flagged by 62% of antivirus engines (84 detections). Linked to Apt37 activity.

Detection summary

  • 84 antivirus detections (62% detection ratio)
  • 0 IDS alerts
  • 1 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Intrusion sets: APT37 (G0067)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Cyber Threat Alliance 2026-08-26 10:05:31 2026-10-16 15:29:51 malicious-activity
Msil Cyber Threat Alliance 2026-10-09 15:58:36 2026-10-09 15:58:36 malicious-activity
Apt37 Maltiverse 2023-07-04 04:28:54 2023-07-05 20:50:50 malicious-activity G0067 APT37
Generic Malware Hybrid-Analysis 2023-01-31 07:00:03 2023-01-31 07:00:03
Generic.Malware MalwareBazaar Abuse.ch 2023-01-24 16:10:12 2023-01-24 16:10:12 malicious-activity

Tags

apt

Sample information

Filenames
7e93bacbbc33e6652e147e7fe07572a0, 850cd190aaeebcf1505674d97f51756f325e650320eaf76785d954223a9bee38.exe, moda1.exe
File type
PE32 executable (GUI) Intel 80386 Mono/.Net assemb ...
Size
11264 bytes
MD5
7e93bacbbc33e6652e147e7fe07572a0
SHA-1
421a7167da01c8da4dc4d5234ca3dd84e319e762
SHA-256
850cd190aaeebcf1505674d97f51756f325e650320eaf76785d954223a9bee38
First indexed
2023-01-24 16:15:22
Last updated
2026-01-16 00:03:43

Antivirus detections

EngineDetection
BkavW32.AIDetectNet.01
LionicTrojan.Win32.Generic.4!c
MicroWorld-eScanGen:Variant.Tedy.277851
FireEyeGen:Variant.Tedy.277851
ALYacGen:Variant.Tedy.277851
CylanceUnsafe
SymantecML.Attribute.HighConfidence
Elasticmalicious (moderate confidence)
APEXMalicious
CynetMalicious (score: 100)
KasperskyUDS:DangerousObject.Multi.Generic
BitDefenderGen:Variant.Tedy.277851
AvastWin32:TrojanX-gen [Trj]
RisingTrojan.Agent!8.B1E (CLOUD)
EmsisoftGen:Variant.Tedy.277851 (B)
McAfee-GW-EditionArtemis!Trojan
GDataGen:Variant.Tedy.277851
WebrootW32.Malware.Gen
Antiy-AVLTrojan/Script.Phonzy
KingsoftWin32.Troj.Undef.(kcloud)
GridinsoftTrojan.Win32.Gen.ca
ArcabitTrojan.Tedy.D43D5B
ZoneAlarmHEUR:Trojan.MSIL.Agent.gen
MicrosoftTrojan:Win32/Wacatac.B!ml
McAfeeArtemis!7E93BACBBC33
MAXmalware (ai score=81)
TrendMicro-HouseCallTROJ_GEN.R011H07AN23
MaxSecureTrojan.Malware.300983.susgen
AVGWin32:TrojanX-gen [Trj]
PandaTrj/Chgt.AD
CrowdStrikewin/malicious_confidence_60% (W)
ALYacTrojan.GenericKDZ.98386
AVGWin32:MalwareX-gen [Trj]
AhnLab-V3Trojan/Win.Avkiller.C5366924
AlibabaTrojan:MSIL/plugx.b34cd7af
ArcabitTrojan.Generic.D18052
AvastWin32:MalwareX-gen [Trj]
AviraTR/ATRAPS.Gen
BitDefenderTrojan.GenericKDZ.98386
CAT-QuickHealTrojan.YakbeexMSIL.ZZ4
CTXexe.trojan.msil
CrowdStrikewin/malicious_confidence_100% (W)
DeepInstinctMALICIOUS
DrWebTrojan.Siggen19.32857
ESET-NOD32MSIL/Disabler.DR trojan
Elasticmalicious (high confidence)
EmsisoftTrojan.GenericKDZ.98386 (B)
F-SecureTrojan.TR/ATRAPS.Gen
FortinetMSIL/GenericKDZ.98386!tr
GDataMSIL.Trojan.Disabler.F
GoogleDetected
GridinsoftTrojan.Win32.Downloader.dd!n
IkarusTrojan.MSIL.Agent
JiangminTrojan.MSIL.aocbf
K7AntiVirusTrojan ( 005a38161 )
K7GWTrojan ( 005a38161 )
KasperskyHEUR:Trojan.MSIL.Agent.gen
KingsoftWin32.Troj.Generic.v
LionicTrojan.Win32.Disabler.4!c
MalwarebytesDisabler.Trojan.MSIL.DDS
McAfeeDti!850CD190AAEE
MicroWorld-eScanTrojan.GenericKDZ.98386
MicrosoftTrojan:MSIL/plugx!atmn
NANO-AntivirusTrojan.Win32.Disabler.junsud
Paloaltogeneric.ml
RisingTrojan.Disabler!8.B58 (CLOUD)
SUPERAntiSpywareTrojan.Agent/Gen-Crypt
SangforSuspicious.Win32.Save.a
SentinelOneStatic AI - Malicious PE
SkyhighBehavesLike.Win32.Infected.lt
SophosMal/Disabler-A
SymantecTrojan Horse
TencentTrojan.MSIL.Agent.hg
TrellixENSPWS-FDON!7E93BACBBC33
TrendMicroTrojan.Win32.AMADEY.YXDFWZ
TrendMicro-HouseCallTrojan.Win32.VSX.PE04C9t
VIPRETrojan.GenericKDZ.98386
VirITTrojan.Win32.MSIL.EY
WebrootW32.Trojan.Gen
XcitiumApplicUnwnt@#1ftfc2ja2g1dd
YandexTrojan.Disabler!G6z7qDxyklM
ZoneAlarmMal/Disabler-A
alibabacloudTrojan:Win/Disabler.DV
huorongTrojan/KillAV.ak

Process list

NameCommand line
moda1.exe