General

  • Target

    JaffaCakes118_ef454d1629786ef6b0f09b294dda1ce0b7f46ab4c1d00763d697962a74a62ffa

  • Size

    391KB

  • Sample

    241226-2ehwrstjev

  • MD5

    055c23a0f4c81c06bc152a1badedc131

  • SHA1

    3cdb79407667ec0171e6cb3cd85761afc3218a6d

  • SHA256

    ef454d1629786ef6b0f09b294dda1ce0b7f46ab4c1d00763d697962a74a62ffa

  • SHA512

    1e67d29fbc2ed3d05ca6261beb85c328d59841970fe4ecf6a4523feafee6a764dc0e1ac1a7c984d5d6b229e34cd7d25f012343a57c5bc7756e53d8c161fd8710

  • SSDEEP

    6144:9uvba7kveaJwAeQTHopjdYdcpiSVwa4ehk+hY/CQ//th327m6CRTFrb+0ANoX:4za7sp+QduiSicla/CiFh3dDRTFvANoX

Malware Config

Targets

    • Target

      u.bin

    • Size

      933KB

    • MD5

      a2eb8b5535b578d9ad47ecea1e780e02

    • SHA1

      dac25531d2c877215ff94dbb544b2ecc5960fa1d

    • SHA256

      7a7159fcc9307def8e83569f6db08d57bb69901e84d6baf9ec65eba13064fa8e

    • SHA512

      d1d61daeb27f99aceb4da1f2fc4f7e451f439a659efb38083b845febb34c046afcada2361be58b6a5e1588fdce9183cf4e19ac9990315c039b7b2984e7433b88

    • SSDEEP

      12288:FwMjpPhlzBzyvkGQYJ/86GkFLlzvfAz74oLuN99T9O:FFhBy8rYa6NRbw

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader First Stage

MITRE ATT&CK Enterprise v15

Tasks