General

  • Target

    JaffaCakes118_00082b2238eaaac76e1a24522da681e0

  • Size

    676KB

  • Sample

    241231-b6arcsxngq

  • MD5

    00082b2238eaaac76e1a24522da681e0

  • SHA1

    44c24103c23528fe5d017c59b45ae383c9ef066a

  • SHA256

    1198c10779fa09ffc31b5976b776d405d04ce55ee5eb75f02e0ebecd8f72155b

  • SHA512

    62a9cbfde6b547e16256650bcfab2c881ea3ae31aa664494607892527e2485f5d21baf59a742072a39ece073d1db048eda88719061a7586fb88dc9819d1bb7d1

  • SSDEEP

    12288:k1gbKq8G/JXRXYaxNa5JVVjRjt1O6UHK2MEvgyDrVTJtM:Sgf8SJXRXFNa5pj5Ow2MENnVTJtM

Malware Config

Targets

    • Target

      JaffaCakes118_00082b2238eaaac76e1a24522da681e0

    • Size

      676KB

    • MD5

      00082b2238eaaac76e1a24522da681e0

    • SHA1

      44c24103c23528fe5d017c59b45ae383c9ef066a

    • SHA256

      1198c10779fa09ffc31b5976b776d405d04ce55ee5eb75f02e0ebecd8f72155b

    • SHA512

      62a9cbfde6b547e16256650bcfab2c881ea3ae31aa664494607892527e2485f5d21baf59a742072a39ece073d1db048eda88719061a7586fb88dc9819d1bb7d1

    • SSDEEP

      12288:k1gbKq8G/JXRXYaxNa5JVVjRjt1O6UHK2MEvgyDrVTJtM:Sgf8SJXRXFNa5pj5Ow2MENnVTJtM

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks