General

  • Target

    07116ec4a84de6a40d1463edd99a80ff_JaffaCakes118

  • Size

    172KB

  • Sample

    240620-sdgsmsxgkr

  • MD5

    07116ec4a84de6a40d1463edd99a80ff

  • SHA1

    b2915fc118e71f39befe7faa12c3ca3c58ebd540

  • SHA256

    7c77d08316b5c698b66bff9640a79f32a1a4ef142c2965a996771baae9b7783f

  • SHA512

    590ce3a26b667427b01121833da2408a8924cb2fdf24cf170b685c9c9e28732b27b960cbf073e7ddca9c3c7162f7a8504e59c5bb7d4584eaa0459de24330d998

  • SSDEEP

    3072:z/wOS+fEzlFpyAuf6LpvesIDR/au01ZNs2YV8Jds8+Hp:T/WlFpIMIDdau01Y2YhJ

Score
10/10

Malware Config

Targets

    • Target

      07116ec4a84de6a40d1463edd99a80ff_JaffaCakes118

    • Size

      172KB

    • MD5

      07116ec4a84de6a40d1463edd99a80ff

    • SHA1

      b2915fc118e71f39befe7faa12c3ca3c58ebd540

    • SHA256

      7c77d08316b5c698b66bff9640a79f32a1a4ef142c2965a996771baae9b7783f

    • SHA512

      590ce3a26b667427b01121833da2408a8924cb2fdf24cf170b685c9c9e28732b27b960cbf073e7ddca9c3c7162f7a8504e59c5bb7d4584eaa0459de24330d998

    • SSDEEP

      3072:z/wOS+fEzlFpyAuf6LpvesIDR/au01ZNs2YV8Jds8+Hp:T/WlFpIMIDdau01Y2YhJ

    Score
    10/10
    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks