General

  • Target

    JaffaCakes118_02e409126277674e15856268f7750411

  • Size

    687KB

  • Sample

    250121-hx5npsskgy

  • MD5

    02e409126277674e15856268f7750411

  • SHA1

    d6f8f4be901a3910b8e6ceac00d47a055125da60

  • SHA256

    bb1938fe29f0279ae838be9b4bb28b0ba7bcb3982a5f738252f72cb6e5b40298

  • SHA512

    60a785bdf8588c876e3f81d90fc94f1d822cb3faf2091c36d1729d0b5a7115af8c6270edecef6e3739d5449c5be179fc305940d7b22f9f058743549ec9ee5b2e

  • SSDEEP

    12288:Usbxo1OFX8b2QMPkv97F9OWlv5praZXmxM7kkAKg2IIEC6eajArE:81K8yLPw9p9P3aZXWkAKg2IIBJakrE

Malware Config

Targets

    • Target

      JaffaCakes118_02e409126277674e15856268f7750411

    • Size

      687KB

    • MD5

      02e409126277674e15856268f7750411

    • SHA1

      d6f8f4be901a3910b8e6ceac00d47a055125da60

    • SHA256

      bb1938fe29f0279ae838be9b4bb28b0ba7bcb3982a5f738252f72cb6e5b40298

    • SHA512

      60a785bdf8588c876e3f81d90fc94f1d822cb3faf2091c36d1729d0b5a7115af8c6270edecef6e3739d5449c5be179fc305940d7b22f9f058743549ec9ee5b2e

    • SSDEEP

      12288:Usbxo1OFX8b2QMPkv97F9OWlv5praZXmxM7kkAKg2IIEC6eajArE:81K8yLPw9p9P3aZXWkAKg2IIBJakrE

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks