General

  • Target

    JaffaCakes118_09b5b03a03d157d590e645f0873353af

  • Size

    714KB

  • Sample

    250122-dep33svpcn

  • MD5

    09b5b03a03d157d590e645f0873353af

  • SHA1

    498bc956b9c02554136ba4388f38e496168a394c

  • SHA256

    dc8b72462d48dc3989fd801b20584b00d45f8465d8ed4f79435d0d41333fe8cc

  • SHA512

    a6ff1a96454c993c0f6ec8601b96395b1284bd4f06fc0c8ebece304a3f726cfc91c5fd471fbe3c5d73206b3e90bcc005c21fd14ec9a29ba3b42774fb387037f4

  • SSDEEP

    12288:Ac//////XriztNU6YnoaC2WZgteSxpplHvRl8VCJqHnRSqc61S5DZzYFQHNmKWCc:Ac//////bKIWZgcCpPYCcfh1MNaXL

Malware Config

Targets

    • Target

      JaffaCakes118_09b5b03a03d157d590e645f0873353af

    • Size

      714KB

    • MD5

      09b5b03a03d157d590e645f0873353af

    • SHA1

      498bc956b9c02554136ba4388f38e496168a394c

    • SHA256

      dc8b72462d48dc3989fd801b20584b00d45f8465d8ed4f79435d0d41333fe8cc

    • SHA512

      a6ff1a96454c993c0f6ec8601b96395b1284bd4f06fc0c8ebece304a3f726cfc91c5fd471fbe3c5d73206b3e90bcc005c21fd14ec9a29ba3b42774fb387037f4

    • SSDEEP

      12288:Ac//////XriztNU6YnoaC2WZgteSxpplHvRl8VCJqHnRSqc61S5DZzYFQHNmKWCc:Ac//////bKIWZgcCpPYCcfh1MNaXL

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks