General

  • Target

    b7eff0010176072c286a244a9467a928_JaffaCakes118

  • Size

    61KB

  • Sample

    240822-rfv8datdqj

  • MD5

    b7eff0010176072c286a244a9467a928

  • SHA1

    ddbc3ac8fe59ebdf5a21220e9425436e7317ab24

  • SHA256

    ac6fcf27873cf7e6c45e20ad0e9c134d25c900670e0b1b84c58b98f84156d43a

  • SHA512

    08b38c9bd02c980e27fbac4387cec550f10a6e486f2568c0b06dfcb6c14156d42c3bb6fe96e64c15d3e77b8e4c9e1b63227c57634fe4e7d8033969221b51dc68

  • SSDEEP

    1536:xm7wjsVTJ+p3JrkGLawHE/E2j+ENmYJgU9BNtVhXlhFGTU:e+sVT45mn/bjnNqU9B553FGTU

Malware Config

Targets

    • Target

      b7eff0010176072c286a244a9467a928_JaffaCakes118

    • Size

      61KB

    • MD5

      b7eff0010176072c286a244a9467a928

    • SHA1

      ddbc3ac8fe59ebdf5a21220e9425436e7317ab24

    • SHA256

      ac6fcf27873cf7e6c45e20ad0e9c134d25c900670e0b1b84c58b98f84156d43a

    • SHA512

      08b38c9bd02c980e27fbac4387cec550f10a6e486f2568c0b06dfcb6c14156d42c3bb6fe96e64c15d3e77b8e4c9e1b63227c57634fe4e7d8033969221b51dc68

    • SSDEEP

      1536:xm7wjsVTJ+p3JrkGLawHE/E2j+ENmYJgU9BNtVhXlhFGTU:e+sVT45mn/bjnNqU9B553FGTU

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks