General

  • Target

    cfbbc69ff30d257d469833f291212ec7_JaffaCakes118

  • Size

    156KB

  • Sample

    240906-rnkrls1bnp

  • MD5

    cfbbc69ff30d257d469833f291212ec7

  • SHA1

    a207a6422dc2614350363b710fc447dc4d2b83d7

  • SHA256

    497ba60cd76534ba63dd2746fea6967503f5f9cd0639591266a78f19754e87f2

  • SHA512

    61aec42c6fe44556a77e86661908c48655045f68d129d7266851a2d4ded8c41c285bf91d93beb4f4ef06f2836206c990b29e96c22c4f2e32a97c835b837f442d

  • SSDEEP

    3072:Jnhei7MU4hDOSH2f4EFBITslchQpjBizF1oabUNviy+jb9T9:lhPMU4hDSf1B8sllkzLbUNvrIpT9

Malware Config

Targets

    • Target

      cfbbc69ff30d257d469833f291212ec7_JaffaCakes118

    • Size

      156KB

    • MD5

      cfbbc69ff30d257d469833f291212ec7

    • SHA1

      a207a6422dc2614350363b710fc447dc4d2b83d7

    • SHA256

      497ba60cd76534ba63dd2746fea6967503f5f9cd0639591266a78f19754e87f2

    • SHA512

      61aec42c6fe44556a77e86661908c48655045f68d129d7266851a2d4ded8c41c285bf91d93beb4f4ef06f2836206c990b29e96c22c4f2e32a97c835b837f442d

    • SSDEEP

      3072:Jnhei7MU4hDOSH2f4EFBITslchQpjBizF1oabUNviy+jb9T9:lhPMU4hDSf1B8sllkzLbUNvrIpT9

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks