General

  • Target

    JaffaCakes118_0470af82be89a7ca16628a3750453401

  • Size

    640KB

  • Sample

    250121-pbgs3stkam

  • MD5

    0470af82be89a7ca16628a3750453401

  • SHA1

    8eeb97aeb8ebb41b63650659a55d88c6f7ad92b7

  • SHA256

    e0912d7f0f40b32c82157922b2358a7e12824d0c0351a0671b7baf2f21edf28a

  • SHA512

    9e43deede1d408f7fc4918ae08225482c2eedfd96a93542aab1b565bca01a10359b50e8ac56f5e278ed54850136585a68ecfad7f4cf420560c69bf3db908c4e2

  • SSDEEP

    12288:R4C1xb9p/uc66E2ksUEVXUgP6E/i2r/NINv5MNf7CYvQTbi6MD3Ae8+zruilcr4z:R3CCVXUgPw2r/NINyNfxvQTberpzK69F

Malware Config

Targets

    • Target

      JaffaCakes118_0470af82be89a7ca16628a3750453401

    • Size

      640KB

    • MD5

      0470af82be89a7ca16628a3750453401

    • SHA1

      8eeb97aeb8ebb41b63650659a55d88c6f7ad92b7

    • SHA256

      e0912d7f0f40b32c82157922b2358a7e12824d0c0351a0671b7baf2f21edf28a

    • SHA512

      9e43deede1d408f7fc4918ae08225482c2eedfd96a93542aab1b565bca01a10359b50e8ac56f5e278ed54850136585a68ecfad7f4cf420560c69bf3db908c4e2

    • SSDEEP

      12288:R4C1xb9p/uc66E2ksUEVXUgP6E/i2r/NINv5MNf7CYvQTbi6MD3Ae8+zruilcr4z:R3CCVXUgPw2r/NINyNfxvQTberpzK69F

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks