General

  • Target

    88682a077cb1353750b58560c00ec534_JaffaCakes118

  • Size

    639KB

  • Sample

    240811-bjb1xaxfqq

  • MD5

    88682a077cb1353750b58560c00ec534

  • SHA1

    8ce149e9303b298b1c872795cef55d94bcbfa771

  • SHA256

    57ae7cb1d028b6ce66daf4667b205a5bd8993117babcafb955033cb179e0ce62

  • SHA512

    4f34de85edd392aa3da72d6b967fd3949786d852f2556dfa545c4ef8739ad374a294cacabf5b48c5ff06a8a97a53eae483669eda45fd6e2f747a449b0ce0cad5

  • SSDEEP

    12288:8VAtMIPq9oO6uiZDg/SvIaeCps2hmqYtHRPuOV7PAR:8KtMT+/uiZxvIaeCHYnbR

Malware Config

Targets

    • Target

      88682a077cb1353750b58560c00ec534_JaffaCakes118

    • Size

      639KB

    • MD5

      88682a077cb1353750b58560c00ec534

    • SHA1

      8ce149e9303b298b1c872795cef55d94bcbfa771

    • SHA256

      57ae7cb1d028b6ce66daf4667b205a5bd8993117babcafb955033cb179e0ce62

    • SHA512

      4f34de85edd392aa3da72d6b967fd3949786d852f2556dfa545c4ef8739ad374a294cacabf5b48c5ff06a8a97a53eae483669eda45fd6e2f747a449b0ce0cad5

    • SSDEEP

      12288:8VAtMIPq9oO6uiZDg/SvIaeCps2hmqYtHRPuOV7PAR:8KtMT+/uiZxvIaeCHYnbR

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks