General

  • Target

    JaffaCakes118_6d39ac07fd2f98e4b2e6d2812119a4f0

  • Size

    489KB

  • Sample

    250103-rj2jka1lfn

  • MD5

    6d39ac07fd2f98e4b2e6d2812119a4f0

  • SHA1

    e9b5d051ab77932ec49c9544e95ef3a662a918b1

  • SHA256

    b13880b0563b4140541331f9aa8f8b4a88de7c5bfa2d8175e97eeb4f34f08a5e

  • SHA512

    1301e70a8896a8546ea9dc0c590f69323e006912a329d9b2b6a8be7c68390ea245fb498b8ec4aedbcf4870d0e6472c7539b09ba7ef7c3b0b65403abbc8ba05a9

  • SSDEEP

    12288:SRyk282zMdfiZRMGs+S2AjS8ocJxt1JAwgF:myk282zGiQMc99OwU

Malware Config

Targets

    • Target

      JaffaCakes118_6d39ac07fd2f98e4b2e6d2812119a4f0

    • Size

      489KB

    • MD5

      6d39ac07fd2f98e4b2e6d2812119a4f0

    • SHA1

      e9b5d051ab77932ec49c9544e95ef3a662a918b1

    • SHA256

      b13880b0563b4140541331f9aa8f8b4a88de7c5bfa2d8175e97eeb4f34f08a5e

    • SHA512

      1301e70a8896a8546ea9dc0c590f69323e006912a329d9b2b6a8be7c68390ea245fb498b8ec4aedbcf4870d0e6472c7539b09ba7ef7c3b0b65403abbc8ba05a9

    • SSDEEP

      12288:SRyk282zMdfiZRMGs+S2AjS8ocJxt1JAwgF:myk282zGiQMc99OwU

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks