General

  • Target

    f876b86c84470aa1760f567b50981215_JaffaCakes118

  • Size

    26KB

  • Sample

    241216-lx3qwsvqax

  • MD5

    f876b86c84470aa1760f567b50981215

  • SHA1

    69007488eabf7ed58ee7e75c7beb4a2e798357c7

  • SHA256

    e3c8c1a65f8aec3ed34d99b5916973a70963a399972c90b412cfc98b77373bca

  • SHA512

    eda05235588dacdfbea147a306476b25f51310c2467466cce53763f18c8a1f2d2fee49a2f95995b976a4b74f25dee8a88f515aa1cfdff1775b7270ae0e1e5b3c

  • SSDEEP

    384:cKoA0iaVZAszu/RQ+mLyvXYu5+z0VHI0Tt7OyA0u11fUV8e4npnUze/mH9sXw0ha:boTHupC2/kV0TstBre8ecKe/GQh0Z

Malware Config

Targets

    • Target

      f876b86c84470aa1760f567b50981215_JaffaCakes118

    • Size

      26KB

    • MD5

      f876b86c84470aa1760f567b50981215

    • SHA1

      69007488eabf7ed58ee7e75c7beb4a2e798357c7

    • SHA256

      e3c8c1a65f8aec3ed34d99b5916973a70963a399972c90b412cfc98b77373bca

    • SHA512

      eda05235588dacdfbea147a306476b25f51310c2467466cce53763f18c8a1f2d2fee49a2f95995b976a4b74f25dee8a88f515aa1cfdff1775b7270ae0e1e5b3c

    • SSDEEP

      384:cKoA0iaVZAszu/RQ+mLyvXYu5+z0VHI0Tt7OyA0u11fUV8e4npnUze/mH9sXw0ha:boTHupC2/kV0TstBre8ecKe/GQh0Z

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks