General

  • Target

    d766b8473d165c0f56d0f62d28509cd7_JaffaCakes118

  • Size

    587KB

  • Sample

    240910-br5yys1hpg

  • MD5

    d766b8473d165c0f56d0f62d28509cd7

  • SHA1

    2b066721df7d2e969d0713cfeef212e181d295fe

  • SHA256

    c117ed84940a1e3c5423d593451703c1966edada7b15050ba6da40f26ce1d815

  • SHA512

    308bbdae60edbe4de97cfdf1a4e06dfb86c8b505084f1df8051450b59d1b0a407e876ea329e7e0798d4fd26cbc4ba0673ed4dc3ba63cada305c9efb87c5e014a

  • SSDEEP

    12288:Ci5TKwkZSULvnTLcyF3Z4mxxJDqVTVOCuE:CqeB4gtQmXgVTzuE

Malware Config

Targets

    • Target

      d766b8473d165c0f56d0f62d28509cd7_JaffaCakes118

    • Size

      587KB

    • MD5

      d766b8473d165c0f56d0f62d28509cd7

    • SHA1

      2b066721df7d2e969d0713cfeef212e181d295fe

    • SHA256

      c117ed84940a1e3c5423d593451703c1966edada7b15050ba6da40f26ce1d815

    • SHA512

      308bbdae60edbe4de97cfdf1a4e06dfb86c8b505084f1df8051450b59d1b0a407e876ea329e7e0798d4fd26cbc4ba0673ed4dc3ba63cada305c9efb87c5e014a

    • SSDEEP

      12288:Ci5TKwkZSULvnTLcyF3Z4mxxJDqVTVOCuE:CqeB4gtQmXgVTzuE

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks