General

  • Target

    JaffaCakes118_07bcaa4e24523921a744bd2b44a905c1

  • Size

    671KB

  • Sample

    250112-g2t74asmdk

  • MD5

    07bcaa4e24523921a744bd2b44a905c1

  • SHA1

    d8ce3d7b73ed406dd267987fa982deaaf6e56669

  • SHA256

    4bf6ab6739e121cc6754e4e1129029fa3c1f8bac32e78768d18fc4f36a033826

  • SHA512

    ec29ea2477e9e8f6bfe69162018ce37df840f2dcbefbd1bf430efbd3e57b095cfca75f55d47dd579b5840dc20e87c9bc50f03fef7cc85d5447d552744fe730ff

  • SSDEEP

    12288:kIPPHCI5zwJQ4+DZANEgwoir8eF3Z4mxxKcHxJ257n+fkbdKQOzi1Yq:kS0JQ4+QEOiRQmXxA5b+fkbEGF

Malware Config

Targets

    • Target

      JaffaCakes118_07bcaa4e24523921a744bd2b44a905c1

    • Size

      671KB

    • MD5

      07bcaa4e24523921a744bd2b44a905c1

    • SHA1

      d8ce3d7b73ed406dd267987fa982deaaf6e56669

    • SHA256

      4bf6ab6739e121cc6754e4e1129029fa3c1f8bac32e78768d18fc4f36a033826

    • SHA512

      ec29ea2477e9e8f6bfe69162018ce37df840f2dcbefbd1bf430efbd3e57b095cfca75f55d47dd579b5840dc20e87c9bc50f03fef7cc85d5447d552744fe730ff

    • SSDEEP

      12288:kIPPHCI5zwJQ4+DZANEgwoir8eF3Z4mxxKcHxJ257n+fkbdKQOzi1Yq:kS0JQ4+QEOiRQmXxA5b+fkbEGF

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks