General

  • Target

    JaffaCakes118_5ba64e62511b193a451a0ef1ab45e487

  • Size

    98KB

  • Sample

    250115-thpvgsypgn

  • MD5

    5ba64e62511b193a451a0ef1ab45e487

  • SHA1

    f7d0f982c3404beefb85254a6f6326b5f9db3a23

  • SHA256

    af4d48b5f5c115308c2676b6797645e5641f2176fab647b31cf934821cebdd2d

  • SHA512

    303dfd55a9df506a6dc573b9e2432347a2ab50d81f7672361c068e46319d7b8e08d9cab5dacfca992681bcce9e531b5bf62a93443e26e684fc9938e97078e586

  • SSDEEP

    1536:fk3vCKr0u7EGSeLOeps1QLt13nUQvVB8EXOILbxu/PZkx2YvJGam8HwiQ:c3quIGSom1S13nUETeCxuZ3YvcaBwiQ

Malware Config

Targets

    • Target

      JaffaCakes118_5ba64e62511b193a451a0ef1ab45e487

    • Size

      98KB

    • MD5

      5ba64e62511b193a451a0ef1ab45e487

    • SHA1

      f7d0f982c3404beefb85254a6f6326b5f9db3a23

    • SHA256

      af4d48b5f5c115308c2676b6797645e5641f2176fab647b31cf934821cebdd2d

    • SHA512

      303dfd55a9df506a6dc573b9e2432347a2ab50d81f7672361c068e46319d7b8e08d9cab5dacfca992681bcce9e531b5bf62a93443e26e684fc9938e97078e586

    • SSDEEP

      1536:fk3vCKr0u7EGSeLOeps1QLt13nUQvVB8EXOILbxu/PZkx2YvJGam8HwiQ:c3quIGSom1S13nUETeCxuZ3YvcaBwiQ

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks