General

  • Target

    JaffaCakes118_07bac6a69a392b080cf6ce390b34a079

  • Size

    735KB

  • Sample

    250121-1mqqxasqgl

  • MD5

    07bac6a69a392b080cf6ce390b34a079

  • SHA1

    08a66490c069be7fe4063e89aec9baa114274235

  • SHA256

    c2bf9e86f246febed185b1cec8c3d1704bd9dd97d72554e0b19591c482525a33

  • SHA512

    822a5fabfef2606566763e8fc5bb9c3557db0257fa71f68ae8ba022b291913fb8a569343c9b480930065a56c534c63363696bc5843f4121681dbec5a7eb8c7b6

  • SSDEEP

    12288:3c//////920yKnrau12R4Jy21AKEUiVsDv/FmXOo5Fv8NbHePgTj6G7zb:3c//////ZyQau1k921kSD/UlFE5+PUjT

Malware Config

Targets

    • Target

      JaffaCakes118_07bac6a69a392b080cf6ce390b34a079

    • Size

      735KB

    • MD5

      07bac6a69a392b080cf6ce390b34a079

    • SHA1

      08a66490c069be7fe4063e89aec9baa114274235

    • SHA256

      c2bf9e86f246febed185b1cec8c3d1704bd9dd97d72554e0b19591c482525a33

    • SHA512

      822a5fabfef2606566763e8fc5bb9c3557db0257fa71f68ae8ba022b291913fb8a569343c9b480930065a56c534c63363696bc5843f4121681dbec5a7eb8c7b6

    • SSDEEP

      12288:3c//////920yKnrau12R4Jy21AKEUiVsDv/FmXOo5Fv8NbHePgTj6G7zb:3c//////ZyQau1k921kSD/UlFE5+PUjT

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks