General

  • Target

    04c30f698ed4f8bc4d1ad96d3d79cb5f_JaffaCakes118

  • Size

    270KB

  • Sample

    240428-j8bqfabe99

  • MD5

    04c30f698ed4f8bc4d1ad96d3d79cb5f

  • SHA1

    9118370f676934d6830171ac57549019a0786ba9

  • SHA256

    3b6d169479a4c3a3c380b5e516fa389fdc852cbeee59dbc3d9f730bdc16698ea

  • SHA512

    bff337c03d1fb3b97884f70a626931e85407689d031b4f52d0fee03fafa3f104932ecfb4ba7bf105e6d5741e8f529573997918bde03ea4f69a50028e6e08bd67

  • SSDEEP

    6144:KG377xS2Vp2CeiorXhwTBOz53t9pcCJJvH:Zr7xS2Vp6FwTkbJJvH

Malware Config

Targets

    • Target

      04c30f698ed4f8bc4d1ad96d3d79cb5f_JaffaCakes118

    • Size

      270KB

    • MD5

      04c30f698ed4f8bc4d1ad96d3d79cb5f

    • SHA1

      9118370f676934d6830171ac57549019a0786ba9

    • SHA256

      3b6d169479a4c3a3c380b5e516fa389fdc852cbeee59dbc3d9f730bdc16698ea

    • SHA512

      bff337c03d1fb3b97884f70a626931e85407689d031b4f52d0fee03fafa3f104932ecfb4ba7bf105e6d5741e8f529573997918bde03ea4f69a50028e6e08bd67

    • SSDEEP

      6144:KG377xS2Vp2CeiorXhwTBOz53t9pcCJJvH:Zr7xS2Vp6FwTkbJJvH

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • UAC bypass

    • ModiLoader Second Stage

    • Loads dropped DLL

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v15

Tasks