Resubmissions

23-12-2024 17:49

241223-wd38eswpcq 10

General

  • Target

    JaffaCakes118_5d6ec9fe9ee6456d07a12fad9b0fb7f4e4386c7d498c626a9d90057b062d1f37

  • Size

    427KB

  • Sample

    241223-wd38eswpcq

  • MD5

    dab5e727376070f7edce11e52636a42a

  • SHA1

    bfb3bc7c2e806ff120e63db8ba0f95cbb406703e

  • SHA256

    5d6ec9fe9ee6456d07a12fad9b0fb7f4e4386c7d498c626a9d90057b062d1f37

  • SHA512

    b727046595d264a65ec3170553a895565fe4942d492c9b8d48c6375f11914cf48fa55daece486c3ecb346888f68caba85f5510c42df7dc925914ac13490ec269

  • SSDEEP

    12288:ExH3l/FyLXuW7i4bAm2rBkI+/ai4Npacjq1:EVLIXuki4bygai4naZ1

Malware Config

Targets

    • Target

      bc3014045d3254e3ae579c2aa019754eeb7f9cf7db76a89e36d150e2a961a4ef~

    • Size

      1006KB

    • MD5

      c92b7075760ae1314406194e16a94a18

    • SHA1

      031428b38ec7cbc4d20e253abd8819071b9b9651

    • SHA256

      ecf2350d8946d7c1ebbfe608014f91f441d51134ac945b3934a80295f34b1835

    • SHA512

      07b54c6f8e917c2cdd3e2a47219e08bf8eea3001c27b1d279b25af1916ddccbf24bde5fb7a985ef4d81bf47d922a19d80db32d735cf648a98fe4a66a073b9c49

    • SSDEEP

      24576:4ZpBjpIaZKLBrAkaqKoRdaNydYXas4E+Dv:4ZpROtNaqKoRdaNush4b

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

MITRE ATT&CK Enterprise v15

Tasks