General

  • Target

    cf99f1fab0dc646cf093a07ad4f666c1_JaffaCakes118

  • Size

    24KB

  • Sample

    240906-qcln4aydkg

  • MD5

    cf99f1fab0dc646cf093a07ad4f666c1

  • SHA1

    bb78a9d3c63fe43b6888b75e3fdbc48ab2022155

  • SHA256

    95eaa5b4f3d5e62591fa31e90726948153e1ce738b8f3567484f09d34035b032

  • SHA512

    0ae14dbfbbcf75f8b920f07f29c7c2c26205faf4574df040e80801cd8f223a7a44992f4f3ae2e0d7dc62acca86128fccd6834798a0dc048d960e7c22fd5fdfe6

  • SSDEEP

    384:wdTpFywSLQ++dZ6uharjxMQrZQKJ0E98SORnLgfimivNqAqHEm+rF9vbme3uPl:MpFHSL9GZrW9F1LmE9UEf7kRhNbmRl

Malware Config

Targets

    • Target

      cf99f1fab0dc646cf093a07ad4f666c1_JaffaCakes118

    • Size

      24KB

    • MD5

      cf99f1fab0dc646cf093a07ad4f666c1

    • SHA1

      bb78a9d3c63fe43b6888b75e3fdbc48ab2022155

    • SHA256

      95eaa5b4f3d5e62591fa31e90726948153e1ce738b8f3567484f09d34035b032

    • SHA512

      0ae14dbfbbcf75f8b920f07f29c7c2c26205faf4574df040e80801cd8f223a7a44992f4f3ae2e0d7dc62acca86128fccd6834798a0dc048d960e7c22fd5fdfe6

    • SSDEEP

      384:wdTpFywSLQ++dZ6uharjxMQrZQKJ0E98SORnLgfimivNqAqHEm+rF9vbme3uPl:MpFHSL9GZrW9F1LmE9UEf7kRhNbmRl

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks