General

  • Target

    cf2e3cfd76ed31b01fa025dfb3f728c3_JaffaCakes118

  • Size

    144KB

  • Sample

    240906-k1r8wsxhpc

  • MD5

    cf2e3cfd76ed31b01fa025dfb3f728c3

  • SHA1

    b67e3742a7eaa740f6553e11105a4435115cdcdd

  • SHA256

    0b52e422abf0d397809a72e5f235734b9ab03b66074476e8906ce8006f303b8e

  • SHA512

    a3469787511a69e3ef2315f261b7e592465ac949ed65a9d6bd39d0aa2824cff4bbcf0c456cb2ddbca97ce1d5140f4872be44096311d283efee11b5a102c15dc8

  • SSDEEP

    1536:PsCqYOQXNCe9E8SMJQquzz0GQa1ltjRH+uopc/EM1zGrKtOvQK:dOmNG8A3H1hqcCrKkIK

Malware Config

Targets

    • Target

      cf2e3cfd76ed31b01fa025dfb3f728c3_JaffaCakes118

    • Size

      144KB

    • MD5

      cf2e3cfd76ed31b01fa025dfb3f728c3

    • SHA1

      b67e3742a7eaa740f6553e11105a4435115cdcdd

    • SHA256

      0b52e422abf0d397809a72e5f235734b9ab03b66074476e8906ce8006f303b8e

    • SHA512

      a3469787511a69e3ef2315f261b7e592465ac949ed65a9d6bd39d0aa2824cff4bbcf0c456cb2ddbca97ce1d5140f4872be44096311d283efee11b5a102c15dc8

    • SSDEEP

      1536:PsCqYOQXNCe9E8SMJQquzz0GQa1ltjRH+uopc/EM1zGrKtOvQK:dOmNG8A3H1hqcCrKkIK

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks