General

  • Target
    2bd5715bf8a895c97031ed4482288657_JaffaCakes118
  • Size 270KB
  • Sample240509-1ht8jabb85
  • SHA256 08f4f76df57c55902a70da5017d77ce8beebc2d6f14ef0c795acf66c1730ee42
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      2bd5715bf8a895c97031ed4482288657_JaffaCakes118
    • Size 270KB
    • SHA256 08f4f76df57c55902a70da5017d77ce8beebc2d6f14ef0c795acf66c1730ee42
    • MD5 SHA1 SHA512 SSDEEP
    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • UAC bypass

    • ModiLoader Second Stage

    • Loads dropped DLL

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v15

Tasks