General

  • Target

    JaffaCakes118_035af77bfabe9feb7216d76ea52f9d9c

  • Size

    27KB

  • Sample

    250121-klb85avlew

  • MD5

    035af77bfabe9feb7216d76ea52f9d9c

  • SHA1

    1f89088b9f7ad6430a286449e1a807cbe776622d

  • SHA256

    c96411096f971032c4cf631e5752865b87eef9089573d29393f095970e199708

  • SHA512

    e58cc749c1c6454942805beb2649337bc9afa423baf8d1977f3aec51adaaea26d18a17fb9193ec715ad6c61a18b135383b2b7b51121c4e605caad39cec73de88

  • SSDEEP

    768:ooTHupC2/kX7My5eq0zs/Nht3eGRCmw/k6UVY:oYuopLXcq//HRCmx6r

Malware Config

Targets

    • Target

      JaffaCakes118_035af77bfabe9feb7216d76ea52f9d9c

    • Size

      27KB

    • MD5

      035af77bfabe9feb7216d76ea52f9d9c

    • SHA1

      1f89088b9f7ad6430a286449e1a807cbe776622d

    • SHA256

      c96411096f971032c4cf631e5752865b87eef9089573d29393f095970e199708

    • SHA512

      e58cc749c1c6454942805beb2649337bc9afa423baf8d1977f3aec51adaaea26d18a17fb9193ec715ad6c61a18b135383b2b7b51121c4e605caad39cec73de88

    • SSDEEP

      768:ooTHupC2/kX7My5eq0zs/Nht3eGRCmw/k6UVY:oYuopLXcq//HRCmx6r

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks