General

  • Target

    d283b6281b34c194537a8bb44a2f037c_JaffaCakes118

  • Size

    152KB

  • Sample

    240907-wgbycayejc

  • MD5

    d283b6281b34c194537a8bb44a2f037c

  • SHA1

    32270f548f1a603b5ce3114783fa6ba3274d26af

  • SHA256

    7027dad60a6c5cd5e8f78ce709a209cf30efec2f3dce919caf200d9135cc2111

  • SHA512

    97d6b6bf4f9f2445aefc1cc2bb0f063dd6135648780d5af458023c6fb65531cf90300c8d29fcf89a8c2aedfce75ca0a01c5e4a0ad2a045a37bf6ab722db10fab

  • SSDEEP

    1536:dsCqYOQXNCefAoKv6qZQQAe55461JyJpFHSOuopAvbVrgY:/OmN8oKfQven4Ycp1Sa2BgY

Malware Config

Targets

    • Target

      d283b6281b34c194537a8bb44a2f037c_JaffaCakes118

    • Size

      152KB

    • MD5

      d283b6281b34c194537a8bb44a2f037c

    • SHA1

      32270f548f1a603b5ce3114783fa6ba3274d26af

    • SHA256

      7027dad60a6c5cd5e8f78ce709a209cf30efec2f3dce919caf200d9135cc2111

    • SHA512

      97d6b6bf4f9f2445aefc1cc2bb0f063dd6135648780d5af458023c6fb65531cf90300c8d29fcf89a8c2aedfce75ca0a01c5e4a0ad2a045a37bf6ab722db10fab

    • SSDEEP

      1536:dsCqYOQXNCefAoKv6qZQQAe55461JyJpFHSOuopAvbVrgY:/OmN8oKfQven4Ycp1Sa2BgY

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks