General

  • Target

    cd3447e735794c5ade341853fe99d475_JaffaCakes118

  • Size

    1.2MB

  • Sample

    240831-vcx5cavcmq

  • MD5

    cd3447e735794c5ade341853fe99d475

  • SHA1

    65d0da1e319a525e6d32923b1c28c144964ce178

  • SHA256

    ff5301bfc4a3b2d1b1dad9addf5065ebf325527091601176129c8b20d57a7dea

  • SHA512

    8b53671636a43cfeac133aad382f79251e71d61f8e2a5ca4739caa4b31c42b112f168903ad6c76c6a8ebcab7d06e56e51d22f0b52550ed3430057a93ffef7ee5

  • SSDEEP

    24576:3RVtvQ+csIDccuZGhe1ppCmfwybRqeeeeeeeeeeeeeeeeeee0eeeeeeeeeeeeeeo:3R/ovVcOM1pJwYvzQ0t

Malware Config

Targets

    • Target

      cd3447e735794c5ade341853fe99d475_JaffaCakes118

    • Size

      1.2MB

    • MD5

      cd3447e735794c5ade341853fe99d475

    • SHA1

      65d0da1e319a525e6d32923b1c28c144964ce178

    • SHA256

      ff5301bfc4a3b2d1b1dad9addf5065ebf325527091601176129c8b20d57a7dea

    • SHA512

      8b53671636a43cfeac133aad382f79251e71d61f8e2a5ca4739caa4b31c42b112f168903ad6c76c6a8ebcab7d06e56e51d22f0b52550ed3430057a93ffef7ee5

    • SSDEEP

      24576:3RVtvQ+csIDccuZGhe1ppCmfwybRqeeeeeeeeeeeeeeeeeee0eeeeeeeeeeeeeeo:3R/ovVcOM1pJwYvzQ0t

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader First Stage

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks