General

  • Target

    JaffaCakes118_988f8a45a1632875ccdcf82dc721d34e

  • Size

    306KB

  • Sample

    250330-msj9esyr13

  • MD5

    988f8a45a1632875ccdcf82dc721d34e

  • SHA1

    b5ad9406ee635ccb177dc8273760232d3a85115e

  • SHA256

    8b66344e40460633925c5acd3080ac18d676989a0b744532ad8e714325a6da0b

  • SHA512

    ec92eeaf5e02338a4a3ded6bb5d9b684f79f2c543d1abf31e8599926e2dde596881fbcac84738016bea799e3805b7d0e1c367daa0f070b2f596dcde4769483e9

  • SSDEEP

    6144:J0crF/loaYVV6/BlWQZOV9TRWkSQkkGK7IWrO+rGfHRMNyz/BY/SCx97jH:GcrF9o/UlW6OV9scr7IgO+rGfHRMNSi3

Malware Config

Targets

    • Target

      JaffaCakes118_988f8a45a1632875ccdcf82dc721d34e

    • Size

      306KB

    • MD5

      988f8a45a1632875ccdcf82dc721d34e

    • SHA1

      b5ad9406ee635ccb177dc8273760232d3a85115e

    • SHA256

      8b66344e40460633925c5acd3080ac18d676989a0b744532ad8e714325a6da0b

    • SHA512

      ec92eeaf5e02338a4a3ded6bb5d9b684f79f2c543d1abf31e8599926e2dde596881fbcac84738016bea799e3805b7d0e1c367daa0f070b2f596dcde4769483e9

    • SSDEEP

      6144:J0crF/loaYVV6/BlWQZOV9TRWkSQkkGK7IWrO+rGfHRMNyz/BY/SCx97jH:GcrF9o/UlW6OV9scr7IgO+rGfHRMNSi3

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

MITRE ATT&CK Enterprise v15

Tasks