General

  • Target

    JaffaCakes118_0d3b1e8d465ce468924a6c4f165f0148

  • Size

    644KB

  • Sample

    250122-nmq1fsvmhr

  • MD5

    0d3b1e8d465ce468924a6c4f165f0148

  • SHA1

    46dc3818cdf16e22d4326883db48efa7fbd67491

  • SHA256

    ed65a0d8566f8485b88c03211f1b2d184a7a5706c4b33e2db73e8c07af58969f

  • SHA512

    d473483aa31855c46258d98779be3ea9ad5606f1b220c623f8e2028b3ab5492ace6b8e8279bb06d74df88a3654cf345372c8b9ad61b0174a97ef1bdb7375d1e6

  • SSDEEP

    12288:a3JrYf8uXXkM3+7dNCFZxfoxF3Z4mxx/57yYJz8YKR:a3d2vUHWJoxQmX/5Bz8YKR

Malware Config

Targets

    • Target

      JaffaCakes118_0d3b1e8d465ce468924a6c4f165f0148

    • Size

      644KB

    • MD5

      0d3b1e8d465ce468924a6c4f165f0148

    • SHA1

      46dc3818cdf16e22d4326883db48efa7fbd67491

    • SHA256

      ed65a0d8566f8485b88c03211f1b2d184a7a5706c4b33e2db73e8c07af58969f

    • SHA512

      d473483aa31855c46258d98779be3ea9ad5606f1b220c623f8e2028b3ab5492ace6b8e8279bb06d74df88a3654cf345372c8b9ad61b0174a97ef1bdb7375d1e6

    • SSDEEP

      12288:a3JrYf8uXXkM3+7dNCFZxfoxF3Z4mxx/57yYJz8YKR:a3d2vUHWJoxQmX/5Bz8YKR

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks