General

  • Target

    JaffaCakes118_d6cbcc8dabc7138e9abd84a4fc34392e11f8b80d1be804934ba0d005485d9786

  • Size

    514KB

  • Sample

    241222-memsdsvlbr

  • MD5

    3d05c2107cd31bf8a84a0c3524a2d3c4

  • SHA1

    a69148f06f2bdfc0fc0e38c38d956173e1170087

  • SHA256

    d6cbcc8dabc7138e9abd84a4fc34392e11f8b80d1be804934ba0d005485d9786

  • SHA512

    e2ce0456c7a5ee26059254af0d057467eb316a4203189a6f84d5b4cbddd8cc7a95f50eb25335455be2764be6a5b6e05f6679bceda45cf52c228a5b1c226ae7cc

  • SSDEEP

    12288:7E2jL5hBqK3/mo0qrbTg/9C57b83Rqj4n0q:Hn93eopPTZbSRq8n5

Malware Config

Targets

    • Target

      eddd07b69b4942f144f84ce2f03c6785b8c770a6f226c5d0f31c47bb147e7367

    • Size

      1.0MB

    • MD5

      6048b7d63c1d99c4b6d1732fc6d941ae

    • SHA1

      524a1d0da58ad8bae9cf5f07a219985679013377

    • SHA256

      eddd07b69b4942f144f84ce2f03c6785b8c770a6f226c5d0f31c47bb147e7367

    • SHA512

      3bd9b413caef04df42984153b1151cd598023def6c9da9a77ddb05f90158e170314863fc40d366fbec5b0bb3b36cb72fff1be4b18be14af9d0df1fa103a6f629

    • SSDEEP

      24576:VkUwSu91iUJodQ/UbMV2i4rpNXeaqnjD:Vw9tyi4NXeaqnjD

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

MITRE ATT&CK Enterprise v15

Tasks