General

  • Target

    JaffaCakes118_779101ddecc4ae380539d32261732b9f

  • Size

    679KB

  • Sample

    250104-etz29s1lew

  • MD5

    779101ddecc4ae380539d32261732b9f

  • SHA1

    e0ea88bcc9718a144d39c3b358cae9d9b68359df

  • SHA256

    56ea453e5121f286de0b6bcf64d964f23a5ab8e685b3003903d85a2946cb3cab

  • SHA512

    dee83e21732ec8b98497ee188887084d794f82f7d036828d055cc8eab6a4a4d6c20d1db81bfc5f867df28be273a96123b98011e5b8022982f1742ae80749d1bb

  • SSDEEP

    12288:nbAh7WxXBmKaC5wa1ASQiLWqFzgyikeNAtKwpj/86Tqu:kVWxaC5wa1tqqdXE+86TH

Malware Config

Targets

    • Target

      JaffaCakes118_779101ddecc4ae380539d32261732b9f

    • Size

      679KB

    • MD5

      779101ddecc4ae380539d32261732b9f

    • SHA1

      e0ea88bcc9718a144d39c3b358cae9d9b68359df

    • SHA256

      56ea453e5121f286de0b6bcf64d964f23a5ab8e685b3003903d85a2946cb3cab

    • SHA512

      dee83e21732ec8b98497ee188887084d794f82f7d036828d055cc8eab6a4a4d6c20d1db81bfc5f867df28be273a96123b98011e5b8022982f1742ae80749d1bb

    • SSDEEP

      12288:nbAh7WxXBmKaC5wa1ASQiLWqFzgyikeNAtKwpj/86Tqu:kVWxaC5wa1tqqdXE+86TH

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks