General

  • Target

    074391e6f0bdc130acd14ac879ee7a8c_JaffaCakes118

  • Size

    90KB

  • Sample

    240620-st9tcsvbjc

  • MD5

    074391e6f0bdc130acd14ac879ee7a8c

  • SHA1

    6f4e95fa6f2beb5e9c6009727768c4f7b85cb517

  • SHA256

    69a7526ed322f3919a210772bb0d2d8b2a4ce2a61caee4b170a37d646f97622c

  • SHA512

    16672c5b7d532493f7ac7af45abc596bc4af40948a6179b1222166f31c9dbfda7eaedac147d649a4aae95526b45dc3327f7d4381ec6144e05af158527e01c423

  • SSDEEP

    1536:mcHA5dZuvrKA1r4Jwwi55dlvo89UBYKpJ0pHWG7m9pAsiyRlIm3UKLgirOdYy/:mcg7UrKqUwflAZYKX6aAsiyZxTuY

Score
10/10

Malware Config

Targets

    • Target

      074391e6f0bdc130acd14ac879ee7a8c_JaffaCakes118

    • Size

      90KB

    • MD5

      074391e6f0bdc130acd14ac879ee7a8c

    • SHA1

      6f4e95fa6f2beb5e9c6009727768c4f7b85cb517

    • SHA256

      69a7526ed322f3919a210772bb0d2d8b2a4ce2a61caee4b170a37d646f97622c

    • SHA512

      16672c5b7d532493f7ac7af45abc596bc4af40948a6179b1222166f31c9dbfda7eaedac147d649a4aae95526b45dc3327f7d4381ec6144e05af158527e01c423

    • SSDEEP

      1536:mcHA5dZuvrKA1r4Jwwi55dlvo89UBYKpJ0pHWG7m9pAsiyRlIm3UKLgirOdYy/:mcg7UrKqUwflAZYKX6aAsiyZxTuY

    Score
    10/10
    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks