General

  • Target

    d11a1db6536abe63b09d731f54fcce9d_JaffaCakes118

  • Size

    612KB

  • Sample

    240907-fb13aavgnl

  • MD5

    d11a1db6536abe63b09d731f54fcce9d

  • SHA1

    2e1dbcd4234dbabac75a622cface6de0a5bccd1a

  • SHA256

    c736655166d7785c18c8738da524d2da7f02882fe628a5b5a663717b173cbb16

  • SHA512

    d18fefd5d9b8f2fbaa5167e70b450a07855a52e8c5afd177720e98e51c79652e32486470379b826b26806da4beb9890c066973745f8f2f62b5b6a849b1e5a926

  • SSDEEP

    12288:8ARQXylI3Q5Z7mbSX9WtzNTgJRN03+tccfEbuwI/vYewu:8ASII3Q/mbSX9ETgjN0OtccfMuwIHX

Malware Config

Targets

    • Target

      d11a1db6536abe63b09d731f54fcce9d_JaffaCakes118

    • Size

      612KB

    • MD5

      d11a1db6536abe63b09d731f54fcce9d

    • SHA1

      2e1dbcd4234dbabac75a622cface6de0a5bccd1a

    • SHA256

      c736655166d7785c18c8738da524d2da7f02882fe628a5b5a663717b173cbb16

    • SHA512

      d18fefd5d9b8f2fbaa5167e70b450a07855a52e8c5afd177720e98e51c79652e32486470379b826b26806da4beb9890c066973745f8f2f62b5b6a849b1e5a926

    • SSDEEP

      12288:8ARQXylI3Q5Z7mbSX9WtzNTgJRN03+tccfEbuwI/vYewu:8ASII3Q/mbSX9ETgjN0OtccfMuwIHX

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks