General

  • Target

    JaffaCakes118_5d7e7c18fff93198c9cb94f7cfff2765

  • Size

    632KB

  • Sample

    250115-v2he7a1ldm

  • MD5

    5d7e7c18fff93198c9cb94f7cfff2765

  • SHA1

    ae7d85360a644a3e8616e36dd3f20f0d0faddd94

  • SHA256

    4c0e6cddf93ae8545d0450f80a76808e6ca7191076bcd675be7da8f41b0b8a39

  • SHA512

    aaa13d9fbeedec09cf7f13d4641e8d2d8a4abc78d84c54ce7be65322331ea2debbce7612cd441f57d6e5883b08f38b082e47d6a8264db92b179c66bea413a939

  • SSDEEP

    12288:THGppUr1tyjaRkG20IqRdCnl80rZG5mMrLF3Z4mxxB9Ou7hB9CsFJKBVMtai0:THqpUZ4jamG1h+trZcmGLQmXBgu7hBoD

Malware Config

Targets

    • Target

      JaffaCakes118_5d7e7c18fff93198c9cb94f7cfff2765

    • Size

      632KB

    • MD5

      5d7e7c18fff93198c9cb94f7cfff2765

    • SHA1

      ae7d85360a644a3e8616e36dd3f20f0d0faddd94

    • SHA256

      4c0e6cddf93ae8545d0450f80a76808e6ca7191076bcd675be7da8f41b0b8a39

    • SHA512

      aaa13d9fbeedec09cf7f13d4641e8d2d8a4abc78d84c54ce7be65322331ea2debbce7612cd441f57d6e5883b08f38b082e47d6a8264db92b179c66bea413a939

    • SSDEEP

      12288:THGppUr1tyjaRkG20IqRdCnl80rZG5mMrLF3Z4mxxB9Ou7hB9CsFJKBVMtai0:THqpUZ4jamG1h+trZcmGLQmXBgu7hBoD

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks