General

  • Target

    fd8603ac0863c641297e023f70d95512_JaffaCakes118

  • Size

    211KB

  • Sample

    240420-yn6gmsgd87

  • MD5

    fd8603ac0863c641297e023f70d95512

  • SHA1

    800d4a743740fb0d12377b0886ee29774db16f7e

  • SHA256

    c6ecc38740aab40296c6fd2eedc8269ad33c569fbff2383a798dd36e6110e959

  • SHA512

    1772d573872b912ca82248a55f02d0028f1b584174106f10ed758db4fc3699e52e060e76e8c1206faec549447e60d3d073637da81bbd9350f8177ce91985b041

  • SSDEEP

    6144:QdeQZ+LlgkMX04uCnuRTzR03vTJr37O3Q8:+eQsBdUbvpqg

Malware Config

Targets

    • Target

      fd8603ac0863c641297e023f70d95512_JaffaCakes118

    • Size

      211KB

    • MD5

      fd8603ac0863c641297e023f70d95512

    • SHA1

      800d4a743740fb0d12377b0886ee29774db16f7e

    • SHA256

      c6ecc38740aab40296c6fd2eedc8269ad33c569fbff2383a798dd36e6110e959

    • SHA512

      1772d573872b912ca82248a55f02d0028f1b584174106f10ed758db4fc3699e52e060e76e8c1206faec549447e60d3d073637da81bbd9350f8177ce91985b041

    • SSDEEP

      6144:QdeQZ+LlgkMX04uCnuRTzR03vTJr37O3Q8:+eQsBdUbvpqg

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Deletes itself

    • Executes dropped EXE

MITRE ATT&CK Matrix ATT&CK v13

Tasks