General

  • Target

    d3be4a48469b9c5a4e6eb2fc20ce323e_JaffaCakes118

  • Size

    24KB

  • Sample

    240908-g6xtsa1epk

  • MD5

    d3be4a48469b9c5a4e6eb2fc20ce323e

  • SHA1

    a5d7eca144bfa64b928f7554c77a55d75b2c5d2f

  • SHA256

    e951432538bbb079469287d193bbaebc6a3d6b162ff88794c24f82f9a744ab3f

  • SHA512

    a3a39c7d66ae1c13027f9e9af8eb50c3870ede7ff382fd76ec65b1d2a1f42a4434ef23771a8871b7950d5bd2d70a2843e78ba8c79f032aa0c839507446274e5e

  • SSDEEP

    384:C3pJzu/RQ+mLyvXYu5+z0Y3YkqggX5s1/5uhTUfOa8vNY5Xd8lAocGV:qupC2/kzrqYEUfObek1

Malware Config

Targets

    • Target

      d3be4a48469b9c5a4e6eb2fc20ce323e_JaffaCakes118

    • Size

      24KB

    • MD5

      d3be4a48469b9c5a4e6eb2fc20ce323e

    • SHA1

      a5d7eca144bfa64b928f7554c77a55d75b2c5d2f

    • SHA256

      e951432538bbb079469287d193bbaebc6a3d6b162ff88794c24f82f9a744ab3f

    • SHA512

      a3a39c7d66ae1c13027f9e9af8eb50c3870ede7ff382fd76ec65b1d2a1f42a4434ef23771a8871b7950d5bd2d70a2843e78ba8c79f032aa0c839507446274e5e

    • SSDEEP

      384:C3pJzu/RQ+mLyvXYu5+z0Y3YkqggX5s1/5uhTUfOa8vNY5Xd8lAocGV:qupC2/kzrqYEUfObek1

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks