General

  • Target

    JaffaCakes118_987af028c4339510fda052f6f44d7532

  • Size

    152KB

  • Sample

    250117-11z7havpdr

  • MD5

    987af028c4339510fda052f6f44d7532

  • SHA1

    75985174ac6270554b2420af8a18b0e86fa09d5a

  • SHA256

    696fcaae7a10dd7d54cc8a9d01fa58f5a385207752b94ca8171de227546ce9d1

  • SHA512

    4e583bc5bd749388b6de78ec73d3fdce8eea21328c5592787c1ec9da775026cf3910e070f532ee6f9f5a7a148047e1a16dbb8f9801439023b1e1fe9b7072eec2

  • SSDEEP

    3072:YCLCnfuTXd5CufhHXZPXnPryHd9UykJ65MMbY4IG7jx:NRCufBXx/md9Uy7MM3I8jx

Malware Config

Targets

    • Target

      JaffaCakes118_987af028c4339510fda052f6f44d7532

    • Size

      152KB

    • MD5

      987af028c4339510fda052f6f44d7532

    • SHA1

      75985174ac6270554b2420af8a18b0e86fa09d5a

    • SHA256

      696fcaae7a10dd7d54cc8a9d01fa58f5a385207752b94ca8171de227546ce9d1

    • SHA512

      4e583bc5bd749388b6de78ec73d3fdce8eea21328c5592787c1ec9da775026cf3910e070f532ee6f9f5a7a148047e1a16dbb8f9801439023b1e1fe9b7072eec2

    • SSDEEP

      3072:YCLCnfuTXd5CufhHXZPXnPryHd9UykJ65MMbY4IG7jx:NRCufBXx/md9Uy7MM3I8jx

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks