General

  • Target

    JaffaCakes118_97a38a483d7bd2dac2fba62d10374a13

  • Size

    276KB

  • Sample

    250329-y3trds1yfv

  • MD5

    97a38a483d7bd2dac2fba62d10374a13

  • SHA1

    a457b92220220b3c88e53b000f9364ad1772c819

  • SHA256

    2e4d78749b752f0d0d56ddbdbb54709b793abeeccec6c0f57440a878a887eaf1

  • SHA512

    b4c8919987a27ac5e993b47136a958ee8cda9b2709cd9684c66bd646ec29a3a96f64954e48baf8aeea625a03856f369b568721a967587b88ac18653a06c71c89

  • SSDEEP

    6144:J9wapTXRptjynuSsg8xEEHhL5XgwIYfPXDr9zXhFNVjCy8JGcFjF7l5G9:AgjFGntsN6UhL5Xz1PXDBfN4y8VFxa

Malware Config

Targets

    • Target

      JaffaCakes118_97a38a483d7bd2dac2fba62d10374a13

    • Size

      276KB

    • MD5

      97a38a483d7bd2dac2fba62d10374a13

    • SHA1

      a457b92220220b3c88e53b000f9364ad1772c819

    • SHA256

      2e4d78749b752f0d0d56ddbdbb54709b793abeeccec6c0f57440a878a887eaf1

    • SHA512

      b4c8919987a27ac5e993b47136a958ee8cda9b2709cd9684c66bd646ec29a3a96f64954e48baf8aeea625a03856f369b568721a967587b88ac18653a06c71c89

    • SSDEEP

      6144:J9wapTXRptjynuSsg8xEEHhL5XgwIYfPXDr9zXhFNVjCy8JGcFjF7l5G9:AgjFGntsN6UhL5Xz1PXDBfN4y8VFxa

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks