General

  • Target

    86493ef2613a0bc9e2e2394a1d2dac36_JaffaCakes118

  • Size

    27KB

  • Sample

    240810-q24wzawdlb

  • MD5

    86493ef2613a0bc9e2e2394a1d2dac36

  • SHA1

    00ff13d1a6a8fa178f890801672e4678da46d3b1

  • SHA256

    d8ca86692e16306be3aa644dee43a83d79c8abddc5c82917e4190c386e3cf5b4

  • SHA512

    230cba06d6fcd102ea2098246f905bd18ceae83478480802bc7c8778838ff2966d3cd69ce4512f8dadcd7b37b40c461c98f38bf3ccf64d5e355914ae4f468d59

  • SSDEEP

    384:Fm+8TpFywSLQjzu/RQ+mLyvXYu5+z053hwlIyXIgOvlf6YOBrWjfcSv5TcyKC87s:IJpFHSLyupC2/kURwhp8AjMrCXw

Malware Config

Targets

    • Target

      86493ef2613a0bc9e2e2394a1d2dac36_JaffaCakes118

    • Size

      27KB

    • MD5

      86493ef2613a0bc9e2e2394a1d2dac36

    • SHA1

      00ff13d1a6a8fa178f890801672e4678da46d3b1

    • SHA256

      d8ca86692e16306be3aa644dee43a83d79c8abddc5c82917e4190c386e3cf5b4

    • SHA512

      230cba06d6fcd102ea2098246f905bd18ceae83478480802bc7c8778838ff2966d3cd69ce4512f8dadcd7b37b40c461c98f38bf3ccf64d5e355914ae4f468d59

    • SSDEEP

      384:Fm+8TpFywSLQjzu/RQ+mLyvXYu5+z053hwlIyXIgOvlf6YOBrWjfcSv5TcyKC87s:IJpFHSLyupC2/kURwhp8AjMrCXw

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks