General

  • Target

    JaffaCakes118_03131eb1792488d5ca7b2438ec49a4ad

  • Size

    48KB

  • Sample

    250121-jmg1bstlgl

  • MD5

    03131eb1792488d5ca7b2438ec49a4ad

  • SHA1

    27ac79500b31db047d48416337ee03632b14c236

  • SHA256

    e620f7c0fab6533f36f5036878cb3bbf1307f8fcec4d5015d249818804b51279

  • SHA512

    53ea230c3c97867fec31308e6671767cddb7e0037aaca1e0d6eb5a59af7930369bf76f867aef5e076cf13c5eb9e19dd8732d522fecc56c978e58020f3768a338

  • SSDEEP

    1536:mFNkVvrs9DVAlGqEPBCJUlwDAGPdwK2Kz:mFaRqnqEPB/lwDAGlw9M

Malware Config

Targets

    • Target

      JaffaCakes118_03131eb1792488d5ca7b2438ec49a4ad

    • Size

      48KB

    • MD5

      03131eb1792488d5ca7b2438ec49a4ad

    • SHA1

      27ac79500b31db047d48416337ee03632b14c236

    • SHA256

      e620f7c0fab6533f36f5036878cb3bbf1307f8fcec4d5015d249818804b51279

    • SHA512

      53ea230c3c97867fec31308e6671767cddb7e0037aaca1e0d6eb5a59af7930369bf76f867aef5e076cf13c5eb9e19dd8732d522fecc56c978e58020f3768a338

    • SSDEEP

      1536:mFNkVvrs9DVAlGqEPBCJUlwDAGPdwK2Kz:mFaRqnqEPB/lwDAGlw9M

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks