General

  • Target

    JaffaCakes118_044a0e456528b3a76565469812c2efac

  • Size

    870KB

  • Sample

    250121-nsffxa1pfw

  • MD5

    044a0e456528b3a76565469812c2efac

  • SHA1

    147f1190cafee514125b8845787c23720c80dad3

  • SHA256

    3c74757ed386a5fa702c51f059f241a317cb59a42aaa2abcbecaca7a53825e4f

  • SHA512

    aed438b49a8886947accdbd293a8a9706f62a0e32f383be120e85caea50edf3c2f60cc6ff303bc7b689f264ed3dfd640b087ca4060183c8aeb390a27f67e8513

  • SSDEEP

    24576:6bN4apzTfU1jaUmPVRd05VjsoqifnaFSV8:e9TfmaUmdPcjsoqifnaka

Malware Config

Targets

    • Target

      JaffaCakes118_044a0e456528b3a76565469812c2efac

    • Size

      870KB

    • MD5

      044a0e456528b3a76565469812c2efac

    • SHA1

      147f1190cafee514125b8845787c23720c80dad3

    • SHA256

      3c74757ed386a5fa702c51f059f241a317cb59a42aaa2abcbecaca7a53825e4f

    • SHA512

      aed438b49a8886947accdbd293a8a9706f62a0e32f383be120e85caea50edf3c2f60cc6ff303bc7b689f264ed3dfd640b087ca4060183c8aeb390a27f67e8513

    • SSDEEP

      24576:6bN4apzTfU1jaUmPVRd05VjsoqifnaFSV8:e9TfmaUmdPcjsoqifnaka

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks