General

  • Target
    218f7e47586ce13fa26fa3976b274031_JaffaCakes118
  • Size 683KB
  • Sample240703-jgmcvstand
  • SHA256 a0bb1d4be0aca7bc9f819b9ac5b74065fc1d74d28ba79be4d408098e481d90f4
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      218f7e47586ce13fa26fa3976b274031_JaffaCakes118
    • Size 683KB
    • SHA256 a0bb1d4be0aca7bc9f819b9ac5b74065fc1d74d28ba79be4d408098e481d90f4
    • MD5 SHA1 SHA512 SSDEEP
    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • UAC bypass

    • ModiLoader Second Stage

    • Loads dropped DLL

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v15

Tasks