General

  • Target

    JaffaCakes118_8ee00d58aa5554b7cd142eba7112a68576028eb0342c0d14fac48d0453addc8e

  • Size

    451KB

  • Sample

    241222-eqexxstjbq

  • MD5

    b486aaa97d81318d2befdeefa200b20b

  • SHA1

    ee9bac946b1dab8515a9382f07a3df9ec7425a46

  • SHA256

    8ee00d58aa5554b7cd142eba7112a68576028eb0342c0d14fac48d0453addc8e

  • SHA512

    5ebec934fb374c0657222225bcf0797f7dcd97415e73b2bed87e793562c2b4724999bff31685ff7a3c9056cc6cd06f151e989964a0700759c28df5b6ad39b897

  • SSDEEP

    12288:OK8/MzVPwPVcdsdBXY9kpGWc5GEx7IqSS:OCBPwPWdsd9Y9Oc5F7SS

Malware Config

Targets

    • Target

      lista de facturas vencidas.exe

    • Size

      885KB

    • MD5

      3c91fb9259d95af34c41320bbb997469

    • SHA1

      578f6f96b493c0606a6754ab8d6f34748f79eabb

    • SHA256

      44df3599844e619c3f899c7689c843ba9e62149e772acd184996a59d7279071d

    • SHA512

      16861861fe01fc72e0c251c100147f39278c28a8ba5ca983e32572b30b1d61b555ae8a7d6cbda3073987eaf8277e2a8ce0ea77be41cd49d37ad96d09c82d8e59

    • SSDEEP

      12288:+dvSgikKHSXrFGZ/1nPaPih+gTiwCAI5T7grmN7vwui44YXas4E+Jymf7fv:+dkDSXrAzaNaizeaNydYXas4E+Dv

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

MITRE ATT&CK Enterprise v15

Tasks