General

  • Target

    JaffaCakes118_58a6b7936f77edd249d96a4f66773eb3

  • Size

    641KB

  • Sample

    250115-q5pw8awldj

  • MD5

    58a6b7936f77edd249d96a4f66773eb3

  • SHA1

    59cf3e90ce1cd132b5e8bd133640c0d48a4de730

  • SHA256

    205154024fb9ad6f526f58b048871fe35a80e48aaccf36fb9c83e1e9450bc13e

  • SHA512

    375330eb88298e7942619a21027ee760388fd062b847317e1a562259874e5e30871c28746b4c7551cfd4e3817da3a8c02bd50b3b30609c756eae9a1d8147176f

  • SSDEEP

    12288:0ZT2HoQqB80SvFeuEMN1c2obY7tXE6VA8ZHjp:0hSojB80SvFeXMpocZXEB6Hjp

Malware Config

Targets

    • Target

      JaffaCakes118_58a6b7936f77edd249d96a4f66773eb3

    • Size

      641KB

    • MD5

      58a6b7936f77edd249d96a4f66773eb3

    • SHA1

      59cf3e90ce1cd132b5e8bd133640c0d48a4de730

    • SHA256

      205154024fb9ad6f526f58b048871fe35a80e48aaccf36fb9c83e1e9450bc13e

    • SHA512

      375330eb88298e7942619a21027ee760388fd062b847317e1a562259874e5e30871c28746b4c7551cfd4e3817da3a8c02bd50b3b30609c756eae9a1d8147176f

    • SSDEEP

      12288:0ZT2HoQqB80SvFeuEMN1c2obY7tXE6VA8ZHjp:0hSojB80SvFeXMpocZXEB6Hjp

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks