General

  • Target

    JaffaCakes118_05c47f02af9811799739ec4502ad69a1

  • Size

    423KB

  • Sample

    250121-tg9s9s1qbt

  • MD5

    05c47f02af9811799739ec4502ad69a1

  • SHA1

    9b02bac02fc23ffede3db3295c02ae0ec99ea4f8

  • SHA256

    ad329270c8159b8f0c4c536c3f10ecb3ce46d86f327790bdf967ffca6bd3ca1b

  • SHA512

    69d5015014e444061297fdf19a186b92bba53adacd6cc1e0ad32554eebe3329d92ef4f86610859a97777d16170d1c78ca671c7adce1a69a0d8247b9f30978c85

  • SSDEEP

    6144:AVk05yZS+ev95iv/LR2aQS9hqDfEh99oSO9r6ii29Y0Ka0lX:O5yZS+ev95iXhf27Eh3iiAYfX

Malware Config

Targets

    • Target

      JaffaCakes118_05c47f02af9811799739ec4502ad69a1

    • Size

      423KB

    • MD5

      05c47f02af9811799739ec4502ad69a1

    • SHA1

      9b02bac02fc23ffede3db3295c02ae0ec99ea4f8

    • SHA256

      ad329270c8159b8f0c4c536c3f10ecb3ce46d86f327790bdf967ffca6bd3ca1b

    • SHA512

      69d5015014e444061297fdf19a186b92bba53adacd6cc1e0ad32554eebe3329d92ef4f86610859a97777d16170d1c78ca671c7adce1a69a0d8247b9f30978c85

    • SSDEEP

      6144:AVk05yZS+ev95iv/LR2aQS9hqDfEh99oSO9r6ii29Y0Ka0lX:O5yZS+ev95iXhf27Eh3iiAYfX

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks