General

  • Target

    06b3e0a6d95b9901bd97ed151df45298_JaffaCakes118

  • Size

    872KB

  • Sample

    240620-rhc5ks1gqh

  • MD5

    06b3e0a6d95b9901bd97ed151df45298

  • SHA1

    afe920b859022ea72780a8656721ef0f6fd03066

  • SHA256

    bc87f0f3d1b721c580e784a16a7006b8eb2c9f0e5d83bb456bbca91fba9557e2

  • SHA512

    02dc58d610c6c06eb85e570c8a25ad81f14efd82e3ba11ea902a2481b8a76f3608c343cf8ab9b584a68061678a5c40731e2229e22bd35e5d6136f88473bbb6b8

  • SSDEEP

    24576:8tC0RIzZOfM9+eKh1D29BLmJqB5dBSSr+cL:8tC0RkPUeK7DlJy5TSS

Malware Config

Targets

    • Target

      06b3e0a6d95b9901bd97ed151df45298_JaffaCakes118

    • Size

      872KB

    • MD5

      06b3e0a6d95b9901bd97ed151df45298

    • SHA1

      afe920b859022ea72780a8656721ef0f6fd03066

    • SHA256

      bc87f0f3d1b721c580e784a16a7006b8eb2c9f0e5d83bb456bbca91fba9557e2

    • SHA512

      02dc58d610c6c06eb85e570c8a25ad81f14efd82e3ba11ea902a2481b8a76f3608c343cf8ab9b584a68061678a5c40731e2229e22bd35e5d6136f88473bbb6b8

    • SSDEEP

      24576:8tC0RIzZOfM9+eKh1D29BLmJqB5dBSSr+cL:8tC0RkPUeK7DlJy5TSS

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks