General

  • Target

    JaffaCakes118_00675d3d4dbf7beba3755c0c89fedb50

  • Size

    818KB

  • Sample

    250120-2hkjrssphp

  • MD5

    00675d3d4dbf7beba3755c0c89fedb50

  • SHA1

    2e1957b8fab2f47999ef338e7701ae083e9c36f1

  • SHA256

    c4d4347e8aec51954b2ee8a2f5b3c0e146634a3844b6c36cb3455969bf485586

  • SHA512

    2348be50d739277ef99509cd5c856a1532fffe5ae53e5b0cffe66c658f748fd53086b3b7ce06f1bb7b0397378821ce1b3f493d6835f1ed42975067091d1c9902

  • SSDEEP

    12288:yugl095nSxHxzsFb+4pbzsUn7TFLv0o3mzYRoSLTKMbT:Zy0XSxH9so4pHZNTGcPLTdT

Malware Config

Targets

    • Target

      JaffaCakes118_00675d3d4dbf7beba3755c0c89fedb50

    • Size

      818KB

    • MD5

      00675d3d4dbf7beba3755c0c89fedb50

    • SHA1

      2e1957b8fab2f47999ef338e7701ae083e9c36f1

    • SHA256

      c4d4347e8aec51954b2ee8a2f5b3c0e146634a3844b6c36cb3455969bf485586

    • SHA512

      2348be50d739277ef99509cd5c856a1532fffe5ae53e5b0cffe66c658f748fd53086b3b7ce06f1bb7b0397378821ce1b3f493d6835f1ed42975067091d1c9902

    • SSDEEP

      12288:yugl095nSxHxzsFb+4pbzsUn7TFLv0o3mzYRoSLTKMbT:Zy0XSxH9so4pHZNTGcPLTdT

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks