General

  • Target

    JaffaCakes118_1628b9996843ef20f4f244df20aedf6a

  • Size

    98KB

  • Sample

    250112-xs1araxmhm

  • MD5

    1628b9996843ef20f4f244df20aedf6a

  • SHA1

    53752091fdac6c96fb501a497358fc78836e4289

  • SHA256

    14ace75ccb680168d65193ea891b1ec7d377fe279a110966a8614cb8580b3c20

  • SHA512

    6beb5ab3a303f1aba72d1e90280f711a71c7c4dbb5c0e7e3b12b00550ddbba6e253c1ebc07531ef137407e6143abb9bd421c662726f9437f6ae2593a21f037c2

  • SSDEEP

    3072:73quPY2lphzkfNHBY9gSnYeSz2x97R3w+G0AhieHU+:Dw2lPofxOJYnz2x9y+FAhH

Malware Config

Targets

    • Target

      JaffaCakes118_1628b9996843ef20f4f244df20aedf6a

    • Size

      98KB

    • MD5

      1628b9996843ef20f4f244df20aedf6a

    • SHA1

      53752091fdac6c96fb501a497358fc78836e4289

    • SHA256

      14ace75ccb680168d65193ea891b1ec7d377fe279a110966a8614cb8580b3c20

    • SHA512

      6beb5ab3a303f1aba72d1e90280f711a71c7c4dbb5c0e7e3b12b00550ddbba6e253c1ebc07531ef137407e6143abb9bd421c662726f9437f6ae2593a21f037c2

    • SSDEEP

      3072:73quPY2lphzkfNHBY9gSnYeSz2x97R3w+G0AhieHU+:Dw2lPofxOJYnz2x9y+FAhH

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks