General

  • Target

    JaffaCakes118_69aa8866c02304bd6b1d64a1e7a14620

  • Size

    298KB

  • Sample

    250103-cxybqsvrev

  • MD5

    69aa8866c02304bd6b1d64a1e7a14620

  • SHA1

    e3969091a92f3ee9b465b101534986f049902d67

  • SHA256

    c7cfa0a4ee1c7282ae76fed407c7c48ee44d7b685cd69d553e6f74d0c26adc46

  • SHA512

    5c1bf3dc879d5ae24692743bb1adcdb6fc4ea121280f128768fd33aa734097a9488e22f32827e61924ef4f06b779da0f1ab8026b0ee82f21ac147f51e30f6fc3

  • SSDEEP

    6144:BByAtUHUvW6kiS3mvc7yiSlH53pve/lEZPqyZOrBZfs:B0envW6kxicuiSNRp+EZiyZOtZf

Malware Config

Targets

    • Target

      JaffaCakes118_69aa8866c02304bd6b1d64a1e7a14620

    • Size

      298KB

    • MD5

      69aa8866c02304bd6b1d64a1e7a14620

    • SHA1

      e3969091a92f3ee9b465b101534986f049902d67

    • SHA256

      c7cfa0a4ee1c7282ae76fed407c7c48ee44d7b685cd69d553e6f74d0c26adc46

    • SHA512

      5c1bf3dc879d5ae24692743bb1adcdb6fc4ea121280f128768fd33aa734097a9488e22f32827e61924ef4f06b779da0f1ab8026b0ee82f21ac147f51e30f6fc3

    • SSDEEP

      6144:BByAtUHUvW6kiS3mvc7yiSlH53pve/lEZPqyZOrBZfs:B0envW6kxicuiSNRp+EZiyZOtZf

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks