General

  • Target

    JaffaCakes118_297aeaaeb26ed89a70a75ffddca1057a

  • Size

    1.2MB

  • Sample

    250113-p1by5asmft

  • MD5

    297aeaaeb26ed89a70a75ffddca1057a

  • SHA1

    fcf9ae735d8a9bb046df8ef23086e547fddc26ca

  • SHA256

    4f39b10f4ef228661cd314dbdf11324eb8ad47b35bb34a082c26dc21a117d93d

  • SHA512

    f3cf59ac4812a54e7518f83ef329870af9079c7d19d5df69e62f0df64c5345a17915cd05b213fb33cae5b802c5468f99b45f7d51e85493bb8c3e3a2275733e2a

  • SSDEEP

    24576:Sk+OgUTB5Gu+X/s3qeG4KUchcN2PRm6Q3TM5V9:LgnnUDgh0wbATOV9

Malware Config

Targets

    • Target

      JaffaCakes118_297aeaaeb26ed89a70a75ffddca1057a

    • Size

      1.2MB

    • MD5

      297aeaaeb26ed89a70a75ffddca1057a

    • SHA1

      fcf9ae735d8a9bb046df8ef23086e547fddc26ca

    • SHA256

      4f39b10f4ef228661cd314dbdf11324eb8ad47b35bb34a082c26dc21a117d93d

    • SHA512

      f3cf59ac4812a54e7518f83ef329870af9079c7d19d5df69e62f0df64c5345a17915cd05b213fb33cae5b802c5468f99b45f7d51e85493bb8c3e3a2275733e2a

    • SSDEEP

      24576:Sk+OgUTB5Gu+X/s3qeG4KUchcN2PRm6Q3TM5V9:LgnnUDgh0wbATOV9

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks