General

  • Target

    JaffaCakes118_98f574824e65ddd623ae517df4646398

  • Size

    702KB

  • Sample

    250330-vyjtvas1az

  • MD5

    98f574824e65ddd623ae517df4646398

  • SHA1

    715242a35d324bb7afc3b0ee3411e0784df9d994

  • SHA256

    c05ffe0ed296245571eb4056313032ad04d45790cd74289c5b7cde6634153cb6

  • SHA512

    99f26fc3af210aaa9f99969d46a4f06201304a6f80e9cab8c03054212f8dd5801004b1feb78f31ae2d7ba7f745e45f43ae67af0a2fd485b20fe667f586c25bef

  • SSDEEP

    12288:qONUhMf+iP14NguUaYWiF68w8RWZTh1ugs3YfahF0UajYgcd6a:zNUhMfbHuVy68LRWZTh1uPoCP4/g6a

Malware Config

Targets

    • Target

      JaffaCakes118_98f574824e65ddd623ae517df4646398

    • Size

      702KB

    • MD5

      98f574824e65ddd623ae517df4646398

    • SHA1

      715242a35d324bb7afc3b0ee3411e0784df9d994

    • SHA256

      c05ffe0ed296245571eb4056313032ad04d45790cd74289c5b7cde6634153cb6

    • SHA512

      99f26fc3af210aaa9f99969d46a4f06201304a6f80e9cab8c03054212f8dd5801004b1feb78f31ae2d7ba7f745e45f43ae67af0a2fd485b20fe667f586c25bef

    • SSDEEP

      12288:qONUhMf+iP14NguUaYWiF68w8RWZTh1ugs3YfahF0UajYgcd6a:zNUhMfbHuVy68LRWZTh1uPoCP4/g6a

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks