General

  • Target

    d47eca1186bd3387a4704bf79b9a465e_JaffaCakes118

  • Size

    384KB

  • Sample

    240908-q1zwma1fpf

  • MD5

    d47eca1186bd3387a4704bf79b9a465e

  • SHA1

    7c78087f20e63ea427527788e7031b9db4a8f022

  • SHA256

    31e58a5ffe24c8043ecd08816a14a68bfc6b913e8dd2ebc269d9b1fa38c24b4c

  • SHA512

    a57517bd3ad539b0e80760fb01ba4b8afb4943bbf282dab458165817e16e5532b757617b7a97c178b2e7655d1e1d65d5ee73ddba8aaf3650f6a0c58a06e0decf

  • SSDEEP

    6144:bcTx2F2idZecnl20lHRxp3gFVuYsQ5cOdeRb8iY91EEVKYVAaMB:bcT0F3Z4mxxk7sIcOa/Y91TVK99B

Malware Config

Targets

    • Target

      d47eca1186bd3387a4704bf79b9a465e_JaffaCakes118

    • Size

      384KB

    • MD5

      d47eca1186bd3387a4704bf79b9a465e

    • SHA1

      7c78087f20e63ea427527788e7031b9db4a8f022

    • SHA256

      31e58a5ffe24c8043ecd08816a14a68bfc6b913e8dd2ebc269d9b1fa38c24b4c

    • SHA512

      a57517bd3ad539b0e80760fb01ba4b8afb4943bbf282dab458165817e16e5532b757617b7a97c178b2e7655d1e1d65d5ee73ddba8aaf3650f6a0c58a06e0decf

    • SSDEEP

      6144:bcTx2F2idZecnl20lHRxp3gFVuYsQ5cOdeRb8iY91EEVKYVAaMB:bcT0F3Z4mxxk7sIcOa/Y91TVK99B

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks