General

  • Target

    d7ee5e722cccdebe1884ac702230b3f5_JaffaCakes118

  • Size

    95KB

  • Sample

    240910-kwcyeavhml

  • MD5

    d7ee5e722cccdebe1884ac702230b3f5

  • SHA1

    5b9d5ed8927a019dad2cbb40caa5fa43ec4a601f

  • SHA256

    d4bd7d12511cfab6322192e115857c42bdc6f4acc5e24780dabc4a8ebcea45f7

  • SHA512

    521ac477a37583a8a11783291eabae728bad43a71593a64e6da0e1dd1c93aafabb1f248010d66df18fc15f0eea93a0d8d3cb91d7bfbc60e33be46728f59e48b7

  • SSDEEP

    1536:TjSVLEGCMPVBXaeoUVZRiwyMecWQTMzpT7ftWXdkzyk1Er931eXkr7dW995NIwnL:TjSq0VBXLtU1cW+KBwXdBd1f7Q9nawcq

Malware Config

Targets

    • Target

      d7ee5e722cccdebe1884ac702230b3f5_JaffaCakes118

    • Size

      95KB

    • MD5

      d7ee5e722cccdebe1884ac702230b3f5

    • SHA1

      5b9d5ed8927a019dad2cbb40caa5fa43ec4a601f

    • SHA256

      d4bd7d12511cfab6322192e115857c42bdc6f4acc5e24780dabc4a8ebcea45f7

    • SHA512

      521ac477a37583a8a11783291eabae728bad43a71593a64e6da0e1dd1c93aafabb1f248010d66df18fc15f0eea93a0d8d3cb91d7bfbc60e33be46728f59e48b7

    • SSDEEP

      1536:TjSVLEGCMPVBXaeoUVZRiwyMecWQTMzpT7ftWXdkzyk1Er931eXkr7dW995NIwnL:TjSq0VBXLtU1cW+KBwXdBd1f7Q9nawcq

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v15

Tasks