General

  • Target

    JaffaCakes118_1e2a4cf256d6c7bd4074c6841cd87af1

  • Size

    110KB

  • Sample

    250124-fqtazs1mbs

  • MD5

    1e2a4cf256d6c7bd4074c6841cd87af1

  • SHA1

    03e68a980e6ce70ec6a7f71e69b4abab181e5a98

  • SHA256

    5866ed0e5c8832d35b2ac5649deb66e392e6f331746dae2ea4a2c3b02f80ac2f

  • SHA512

    4592dcb1a38e193332cc6222e2ff9bc12630ebdd0db74aab5c83136675e85a2c5c6db8f26d256ca7104b0d8706c8f97a87ddb06f242456c0143bcc6529a54a2e

  • SSDEEP

    3072:81+MJKrUnFDY5z1i0Nmbi5fJBNQ5Jb8Gout:sIrgj0NmWtNkbPoS

Malware Config

Targets

    • Target

      JaffaCakes118_1e2a4cf256d6c7bd4074c6841cd87af1

    • Size

      110KB

    • MD5

      1e2a4cf256d6c7bd4074c6841cd87af1

    • SHA1

      03e68a980e6ce70ec6a7f71e69b4abab181e5a98

    • SHA256

      5866ed0e5c8832d35b2ac5649deb66e392e6f331746dae2ea4a2c3b02f80ac2f

    • SHA512

      4592dcb1a38e193332cc6222e2ff9bc12630ebdd0db74aab5c83136675e85a2c5c6db8f26d256ca7104b0d8706c8f97a87ddb06f242456c0143bcc6529a54a2e

    • SSDEEP

      3072:81+MJKrUnFDY5z1i0Nmbi5fJBNQ5Jb8Gout:sIrgj0NmWtNkbPoS

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks