General

  • Target

    JaffaCakes118_0a3bcce3a6b55c2c38f6fd5fd9a23108

  • Size

    678KB

  • Sample

    250122-esa2raxpaw

  • MD5

    0a3bcce3a6b55c2c38f6fd5fd9a23108

  • SHA1

    2e93ff7fd49c5fe0b5be8e71c78481a82ab1d94e

  • SHA256

    0baf00371dcb73ddb8bc8714e6bdb51a0856fa140dbe5b3cc290d3302edeb809

  • SHA512

    34b521080848f8a8e2b5f5aa408e1c73b3934a92093b5ecf27f7f4101f59bdc3dfdcefaca671a1bc695c2d04671fc217c492e633dd901371c56749692add52fd

  • SSDEEP

    12288:FcWJRg418UGcjdafMUIbEeOQfA3lQKjlePcL0CA5bvTBAq:FLg5UGcBaEU603V4jRlvT2q

Malware Config

Targets

    • Target

      JaffaCakes118_0a3bcce3a6b55c2c38f6fd5fd9a23108

    • Size

      678KB

    • MD5

      0a3bcce3a6b55c2c38f6fd5fd9a23108

    • SHA1

      2e93ff7fd49c5fe0b5be8e71c78481a82ab1d94e

    • SHA256

      0baf00371dcb73ddb8bc8714e6bdb51a0856fa140dbe5b3cc290d3302edeb809

    • SHA512

      34b521080848f8a8e2b5f5aa408e1c73b3934a92093b5ecf27f7f4101f59bdc3dfdcefaca671a1bc695c2d04671fc217c492e633dd901371c56749692add52fd

    • SSDEEP

      12288:FcWJRg418UGcjdafMUIbEeOQfA3lQKjlePcL0CA5bvTBAq:FLg5UGcBaEU603V4jRlvT2q

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

MITRE ATT&CK Enterprise v15

Tasks