General

  • Target

    d12b07782bca96499080b4b19dedb729_JaffaCakes118

  • Size

    649KB

  • Sample

    240907-f2zbdawhnj

  • MD5

    d12b07782bca96499080b4b19dedb729

  • SHA1

    8db7e19d48619eeec49eadf2ee69758e66a82e65

  • SHA256

    2a67e1a625bf14527dfe0b09d6c2d94795055911eb8d84f13f96215d82133970

  • SHA512

    9ed03a8d3600520570283c3b7c121ff38905312a1429c072973cd32b80c809ebed353d7cf2c487aa6f0004e44d1c7fc44534592fc4da989341ab6f1fcc129583

  • SSDEEP

    12288:x4MZSaX6fNEHkxYOeq2XxVqF3Z4mxx8886R5KM1q1kDUa/+UW:SbE6fNEHOv2XLqQmXC8L01Yb+B

Malware Config

Targets

    • Target

      d12b07782bca96499080b4b19dedb729_JaffaCakes118

    • Size

      649KB

    • MD5

      d12b07782bca96499080b4b19dedb729

    • SHA1

      8db7e19d48619eeec49eadf2ee69758e66a82e65

    • SHA256

      2a67e1a625bf14527dfe0b09d6c2d94795055911eb8d84f13f96215d82133970

    • SHA512

      9ed03a8d3600520570283c3b7c121ff38905312a1429c072973cd32b80c809ebed353d7cf2c487aa6f0004e44d1c7fc44534592fc4da989341ab6f1fcc129583

    • SSDEEP

      12288:x4MZSaX6fNEHkxYOeq2XxVqF3Z4mxx8886R5KM1q1kDUa/+UW:SbE6fNEHOv2XLqQmXC8L01Yb+B

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks