General

  • Target

    1152d0e97be4ddf4aa69df3567f4c937_JaffaCakes118

  • Size

    447KB

  • Sample

    240504-dkz58sef43

  • MD5

    1152d0e97be4ddf4aa69df3567f4c937

  • SHA1

    1d3e1863d0805c49d6824300ee34d93e249445aa

  • SHA256

    f86e3ff33a40ce401f206bfce8161ff3d952afc045461af3d0f422756d914bd3

  • SHA512

    8657e5897ad667ec7a2baa17a1276ff883051629f787b969aabea4d753534fee768664191b6bedaa9a23c0befd9c9f89c814a8e2671d7b177f0cc0c57ef43796

  • SSDEEP

    6144:oLy84u9nSO2GjZkD10BIY3rb1YfBdfpoZ3u/Ht52w6JSeiFPXho6Qf:c+u9nx2GjMY3XKfd/H/9PW6Qf

Malware Config

Targets

    • Target

      1152d0e97be4ddf4aa69df3567f4c937_JaffaCakes118

    • Size

      447KB

    • MD5

      1152d0e97be4ddf4aa69df3567f4c937

    • SHA1

      1d3e1863d0805c49d6824300ee34d93e249445aa

    • SHA256

      f86e3ff33a40ce401f206bfce8161ff3d952afc045461af3d0f422756d914bd3

    • SHA512

      8657e5897ad667ec7a2baa17a1276ff883051629f787b969aabea4d753534fee768664191b6bedaa9a23c0befd9c9f89c814a8e2671d7b177f0cc0c57ef43796

    • SSDEEP

      6144:oLy84u9nSO2GjZkD10BIY3rb1YfBdfpoZ3u/Ht52w6JSeiFPXho6Qf:c+u9nx2GjMY3XKfd/H/9PW6Qf

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Modifies Installed Components in the registry

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks