General

  • Target

    06a9b192663ca17de8dfec9320f05a81_JaffaCakes118

  • Size

    24KB

  • Sample

    240620-rdt8aswamj

  • MD5

    06a9b192663ca17de8dfec9320f05a81

  • SHA1

    2b1e5bb5101b8a94f592be851132394d1423d130

  • SHA256

    eb53c19091ec5702fbf40edffda57f06bdf92625b80fd345fc426eb78c7ea225

  • SHA512

    e26d62b42e22c7a82e1f878f6da3fdd87256fe22475792bc7fe5647bb10f7c1f82c1e4c007f17c3e61de67db16264620c0117570f9a2ace8b19416698eec721f

  • SSDEEP

    384:VjOAmQcn2W+WYFaQ1DbiRZLeFs5A/UcVYIB9buZVboOJku5x7:VjOxR+PsQlUZLey5UU8Of3Jz

Score
10/10

Malware Config

Targets

    • Target

      06a9b192663ca17de8dfec9320f05a81_JaffaCakes118

    • Size

      24KB

    • MD5

      06a9b192663ca17de8dfec9320f05a81

    • SHA1

      2b1e5bb5101b8a94f592be851132394d1423d130

    • SHA256

      eb53c19091ec5702fbf40edffda57f06bdf92625b80fd345fc426eb78c7ea225

    • SHA512

      e26d62b42e22c7a82e1f878f6da3fdd87256fe22475792bc7fe5647bb10f7c1f82c1e4c007f17c3e61de67db16264620c0117570f9a2ace8b19416698eec721f

    • SSDEEP

      384:VjOAmQcn2W+WYFaQ1DbiRZLeFs5A/UcVYIB9buZVboOJku5x7:VjOxR+PsQlUZLey5UU8Of3Jz

    Score
    10/10
    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks