General

  • Target

    JaffaCakes118_1162238c3584e76dcdd75825906ac788

  • Size

    327KB

  • Sample

    250122-1vkjvsxqas

  • MD5

    1162238c3584e76dcdd75825906ac788

  • SHA1

    ba94dccca501359019a4d513c2f1e21cd8f0856c

  • SHA256

    e1642f340cab3265ee520bb6fb2819b6abc12e95b4438b0228fb43c077ac6c0e

  • SHA512

    d43658dfbf3c521c4709b236a53248ae3c198da7744c29ae712135a7d3ee8e5182f359bc9abffffc5333bb8161e5947bd078373a18b5e4186fb6bfe828e4868f

  • SSDEEP

    6144:GL4YkQcqSG+rlZwLc0TrUk4KeGHs42KGw3VoEe5H/HWHvyrKqq8AtUnJ0u:Gsex+pajsk4IMyHiV+HMKVKG

Malware Config

Targets

    • Target

      JaffaCakes118_1162238c3584e76dcdd75825906ac788

    • Size

      327KB

    • MD5

      1162238c3584e76dcdd75825906ac788

    • SHA1

      ba94dccca501359019a4d513c2f1e21cd8f0856c

    • SHA256

      e1642f340cab3265ee520bb6fb2819b6abc12e95b4438b0228fb43c077ac6c0e

    • SHA512

      d43658dfbf3c521c4709b236a53248ae3c198da7744c29ae712135a7d3ee8e5182f359bc9abffffc5333bb8161e5947bd078373a18b5e4186fb6bfe828e4868f

    • SSDEEP

      6144:GL4YkQcqSG+rlZwLc0TrUk4KeGHs42KGw3VoEe5H/HWHvyrKqq8AtUnJ0u:Gsex+pajsk4IMyHiV+HMKVKG

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks