General

  • Target

    d4b61a1a8b94692ab71c1078660c6ce3_JaffaCakes118

  • Size

    136KB

  • Sample

    240908-s9ggrawhrb

  • MD5

    d4b61a1a8b94692ab71c1078660c6ce3

  • SHA1

    7955c658da85d683dedfd6c2c9644f08a15a79c7

  • SHA256

    4043bf446a118781cf501ae8dc24f01bcabc3f3702d66beaebd6df7760c3f108

  • SHA512

    9419750aa7b3716fbdac54d087ad3bb04dbb2e2cd87622004fe694487f00186242b3790742e062a5dc3e3255adab769046e55b2e007b01b5aefeca3be62623fa

  • SSDEEP

    1536:Rm7wjsVTJ+p3JrkGLawHE/E2j+Ei+Hj2aBzybXNEH8McdVYi:++sVT45mn/bjni8DBebXNA8MuY

Malware Config

Targets

    • Target

      d4b61a1a8b94692ab71c1078660c6ce3_JaffaCakes118

    • Size

      136KB

    • MD5

      d4b61a1a8b94692ab71c1078660c6ce3

    • SHA1

      7955c658da85d683dedfd6c2c9644f08a15a79c7

    • SHA256

      4043bf446a118781cf501ae8dc24f01bcabc3f3702d66beaebd6df7760c3f108

    • SHA512

      9419750aa7b3716fbdac54d087ad3bb04dbb2e2cd87622004fe694487f00186242b3790742e062a5dc3e3255adab769046e55b2e007b01b5aefeca3be62623fa

    • SSDEEP

      1536:Rm7wjsVTJ+p3JrkGLawHE/E2j+Ei+Hj2aBzybXNEH8McdVYi:++sVT45mn/bjni8DBebXNA8MuY

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks