General

  • Target

    JaffaCakes118_b0536b862192772e8f3b12d81fc4adf1

  • Size

    677KB

  • Sample

    250118-wbtwzayrgs

  • MD5

    b0536b862192772e8f3b12d81fc4adf1

  • SHA1

    db6381ca9d05b8bbcb25632257fea2fdb7a30d40

  • SHA256

    1646b342695d94ffc119b90e801887c52c07b06c0e46e99d123c03b98076153f

  • SHA512

    9489fa1fb19159d8b4a35f6bc19f1472e54977a9fabbe3d3fb91e98e45976f1bc1dbced0c56fe63f92eabe63123adcf9977685b9da1e201bd8d9e08bed7b8332

  • SSDEEP

    12288:9yvgnKORRYwTC3yayNLkrc0A2INhGPWhZPF+AVCCzTZw:QgXRiwTC3UNLkg0WNhNhZPD8CzTZw

Malware Config

Targets

    • Target

      JaffaCakes118_b0536b862192772e8f3b12d81fc4adf1

    • Size

      677KB

    • MD5

      b0536b862192772e8f3b12d81fc4adf1

    • SHA1

      db6381ca9d05b8bbcb25632257fea2fdb7a30d40

    • SHA256

      1646b342695d94ffc119b90e801887c52c07b06c0e46e99d123c03b98076153f

    • SHA512

      9489fa1fb19159d8b4a35f6bc19f1472e54977a9fabbe3d3fb91e98e45976f1bc1dbced0c56fe63f92eabe63123adcf9977685b9da1e201bd8d9e08bed7b8332

    • SSDEEP

      12288:9yvgnKORRYwTC3yayNLkrc0A2INhGPWhZPF+AVCCzTZw:QgXRiwTC3UNLkg0WNhNhZPD8CzTZw

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

MITRE ATT&CK Enterprise v15

Tasks