General

  • Target

    JaffaCakes118_03670193ca6dffe09f75bdbefa615ab0

  • Size

    79KB

  • Sample

    250121-kq6crsvpas

  • MD5

    03670193ca6dffe09f75bdbefa615ab0

  • SHA1

    82e831e50315c6903f2374e4093a951fa10dcd6f

  • SHA256

    aacaf6711e7e3689f13b82d97ab86a85332509410f3563b6ef956ad69470d2ba

  • SHA512

    3d974cbb258c7ba8d6659925344246e5cf26c1c4812cb0c128191a1c2c8256840f45066b9c485a02aaa24076af3af5f4a381c23a6064241a9df31a399bbf2a20

  • SSDEEP

    1536:DOCaqMQQFOKk9alikAplS/hIb8mWy5EkjQhV+aGlcFDLOBQh5S:7aJFYs9tmWy5R2GlclaYS

Malware Config

Targets

    • Target

      JaffaCakes118_03670193ca6dffe09f75bdbefa615ab0

    • Size

      79KB

    • MD5

      03670193ca6dffe09f75bdbefa615ab0

    • SHA1

      82e831e50315c6903f2374e4093a951fa10dcd6f

    • SHA256

      aacaf6711e7e3689f13b82d97ab86a85332509410f3563b6ef956ad69470d2ba

    • SHA512

      3d974cbb258c7ba8d6659925344246e5cf26c1c4812cb0c128191a1c2c8256840f45066b9c485a02aaa24076af3af5f4a381c23a6064241a9df31a399bbf2a20

    • SSDEEP

      1536:DOCaqMQQFOKk9alikAplS/hIb8mWy5EkjQhV+aGlcFDLOBQh5S:7aJFYs9tmWy5R2GlclaYS

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks