General

  • Target

    JaffaCakes118_a7cfc1e0d8590e3777c4d48afd64652f

  • Size

    747KB

  • Sample

    250118-my7xns1mcx

  • MD5

    a7cfc1e0d8590e3777c4d48afd64652f

  • SHA1

    6a069f397d33af0474ec305823ce0f3cdf7429e2

  • SHA256

    4ccffe08d73c4cbbb7da105beaec198462e1cbdcbc070df8cd06846eb8860d8b

  • SHA512

    92ac353b1242639e321a7d8eb9c9579fdb59a9550908326d6a6b153a53f294594d733796245e70009a9f090c0fdd638412fad890a73700285d4942c172403980

  • SSDEEP

    12288:vaXgrSgQHYPRgvWlivy8jck/Bdhnp+XQ3aBY1xC2dTsHNvLbzJTV:CwbJgvWlwy9Y4XsJCvjJT

Malware Config

Targets

    • Target

      JaffaCakes118_a7cfc1e0d8590e3777c4d48afd64652f

    • Size

      747KB

    • MD5

      a7cfc1e0d8590e3777c4d48afd64652f

    • SHA1

      6a069f397d33af0474ec305823ce0f3cdf7429e2

    • SHA256

      4ccffe08d73c4cbbb7da105beaec198462e1cbdcbc070df8cd06846eb8860d8b

    • SHA512

      92ac353b1242639e321a7d8eb9c9579fdb59a9550908326d6a6b153a53f294594d733796245e70009a9f090c0fdd638412fad890a73700285d4942c172403980

    • SSDEEP

      12288:vaXgrSgQHYPRgvWlivy8jck/Bdhnp+XQ3aBY1xC2dTsHNvLbzJTV:CwbJgvWlwy9Y4XsJCvjJT

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks