General

  • Target

    d9310b86a5efe85e56f79cbe77116c3f_JaffaCakes118

  • Size

    24KB

  • Sample

    240910-3axpss1fre

  • MD5

    d9310b86a5efe85e56f79cbe77116c3f

  • SHA1

    ffc08bb4dc0323f5bdf30fcf6dab454fe01558a0

  • SHA256

    60bfd55b493f035b8640f25a16b892ea6b5f80b97e6276c814e1dbe1daf925b5

  • SHA512

    96c96573b2adef369056bea10acc641464c93ac9f64cd48d024922a8c5143f7b5460071857d5e7f74d8e95ef823cb0c78a7e25391cc6a2929b1db08815d25367

  • SSDEEP

    384:s3pJzu/RQ+mLyvXYu5+z0dhqpn0JA3DOEp72vl3RSV27nJ6vlrYwSqj:4upC2/k4fEB2vHnwtrYi

Malware Config

Targets

    • Target

      d9310b86a5efe85e56f79cbe77116c3f_JaffaCakes118

    • Size

      24KB

    • MD5

      d9310b86a5efe85e56f79cbe77116c3f

    • SHA1

      ffc08bb4dc0323f5bdf30fcf6dab454fe01558a0

    • SHA256

      60bfd55b493f035b8640f25a16b892ea6b5f80b97e6276c814e1dbe1daf925b5

    • SHA512

      96c96573b2adef369056bea10acc641464c93ac9f64cd48d024922a8c5143f7b5460071857d5e7f74d8e95ef823cb0c78a7e25391cc6a2929b1db08815d25367

    • SSDEEP

      384:s3pJzu/RQ+mLyvXYu5+z0dhqpn0JA3DOEp72vl3RSV27nJ6vlrYwSqj:4upC2/k4fEB2vHnwtrYi

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks