General

  • Target

    JaffaCakes118_7286a6c582e6dcb3b7f8a2e94579b1ff4c94af34f3f790c506fee871585ac5e6

  • Size

    430KB

  • Sample

    241225-zrv1raxpgj

  • MD5

    dc32901b46d3ed8cbc7997c6df84bc21

  • SHA1

    4fb9cc03be978575c36be46c884bb4d458d6b6f2

  • SHA256

    7286a6c582e6dcb3b7f8a2e94579b1ff4c94af34f3f790c506fee871585ac5e6

  • SHA512

    df36ca787a17f70e6f7fefab0beb9bf13fe7994bfbe9c70b20ec3d72c58055ce52d24f644addb6cbe252f15f4a0fbab0ac4aa2605ee3b225715ea7ced6848b5f

  • SSDEEP

    12288:IjYXW2/yl15wByxSSkDlsgWfclCWLGwwoBLLTLfvlyzEt:UY4XIyxSPDCgyQfBLLT4Et

Malware Config

Targets

    • Target

      nueva lista de pedidos.exe

    • Size

      852KB

    • MD5

      329206c054fb61994daace3ad6027a47

    • SHA1

      fa5cc5f1b190d903c70109bed4120e9493170f83

    • SHA256

      0c05ff0c91fea630fcd0d0dd04c2cf4bb1bb630579acd09105e8a3b3226d900b

    • SHA512

      760f01e9ae07e9a7d1d5c227e0b862baa6479d3bfa7b692b7a23aeebf6943ddb599f2556ced917fc74305cdc9548c89c62e887e012e23302a5280a509ad13567

    • SSDEEP

      12288:FKVYs+tmo+L67oj7M2WjlFYmlG45ST7greS/8GTN40JIyLrFHJymf7fvM1:FCYSXL6mTaYml/XN40JIyLrFHDvk

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

MITRE ATT&CK Enterprise v15

Tasks