General

  • Target

    JaffaCakes118_c0934d3db2641d75eebf00b32c6dc2e3d3543e31779c84129ae42b4b55d71e09

  • Size

    108KB

  • Sample

    241229-crtrcsyrfy

  • MD5

    331f3e57d4e7a2e2e526272d25dbf017

  • SHA1

    ae7964a560611894183ad49b077438c85010af79

  • SHA256

    c0934d3db2641d75eebf00b32c6dc2e3d3543e31779c84129ae42b4b55d71e09

  • SHA512

    76c5eecfd5138e17eb78dac350cb8c573caa822eb8d1fabc31e747a788cc77ddf5ba011c774360b92cc82e92b3f71839fe86e2002ddc4491db137772583f7a22

  • SSDEEP

    3072:abiwYqUUgo1fp/rizqwWnuiZdk9DBSpHxTEWU:abi5U/1ApLM

Malware Config

Targets

    • Target

      JaffaCakes118_c0934d3db2641d75eebf00b32c6dc2e3d3543e31779c84129ae42b4b55d71e09

    • Size

      108KB

    • MD5

      331f3e57d4e7a2e2e526272d25dbf017

    • SHA1

      ae7964a560611894183ad49b077438c85010af79

    • SHA256

      c0934d3db2641d75eebf00b32c6dc2e3d3543e31779c84129ae42b4b55d71e09

    • SHA512

      76c5eecfd5138e17eb78dac350cb8c573caa822eb8d1fabc31e747a788cc77ddf5ba011c774360b92cc82e92b3f71839fe86e2002ddc4491db137772583f7a22

    • SSDEEP

      3072:abiwYqUUgo1fp/rizqwWnuiZdk9DBSpHxTEWU:abi5U/1ApLM

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader First Stage

MITRE ATT&CK Enterprise v15

Tasks