General

  • Target

    JaffaCakes118_dbbd5763e48f32d8e4edbc124d7958973c21218e02e38b10efdcdc00b3fae5d9

  • Size

    391KB

  • Sample

    241229-mn7h6azjgx

  • MD5

    f2d55c736370bf5485418c11f068fb9e

  • SHA1

    bd11baf0587ffffc82c0f07b7a1b0e3af518da42

  • SHA256

    dbbd5763e48f32d8e4edbc124d7958973c21218e02e38b10efdcdc00b3fae5d9

  • SHA512

    4020e0140f0e551537544a4734e7411feaadc14d39e91d03891e01b6a9b8ee8b3f11ba7012c90f0d0b350896dd7b2d6d1b233caa00c3164396aee190aeb5b7bf

  • SSDEEP

    12288:GxVyV4jyijQsQn1byUU569smPNvsCI1jdKDB:Wy0jQVuUU09T9sC+d8

Malware Config

Targets

    • Target

      scan.bin

    • Size

      933KB

    • MD5

      78acfe30928a6bc2be7032a2a9f0115c

    • SHA1

      f09fdc04c8238122b83c03c7fea2d00c6c0b0788

    • SHA256

      bb387ab70379239bfb7bb448858dabacc620d83d3a3feab48e07dd52118c2ffc

    • SHA512

      a11764705a734a40c1cd573dd210b1b526aa04dd9c7ce7ddebfdaf5a4b5c03f954856e2190be4ff7aa0aef66da43a1149d55d51c9dcef94772e34fa4690e7b34

    • SSDEEP

      12288:FwMjpPhlzBzyvkGQYJ/86GkFLlzvfAz74oQuN99T9O:FFhBy8rYa6NRuw

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader First Stage

MITRE ATT&CK Enterprise v15

Tasks