General

  • Target

    d8ad93b59ae58f4b186667369d741bc7_JaffaCakes118

  • Size

    678KB

  • Sample

    240910-vtxvxavemr

  • MD5

    d8ad93b59ae58f4b186667369d741bc7

  • SHA1

    e6b9a6eec740207b10bb7ebb7bc5dc975de2e17a

  • SHA256

    1ba05bebc1794f4ce94e32869d9e1cc7815a9ea50a447f7dd8114dfd652a39f2

  • SHA512

    d42f6764fccb2115113a32261b1aaec13b9a88487e44890f710f2a601eb63b34c986eb2cd2a6e5de0992da46eedd6a122cc156e38162d7d98ddd1d1f1c866ff7

  • SSDEEP

    12288:BlJSTkdfjgPrpknLC31PqPF3Z4mxx6oCtw0fIxOM9qRTiIwA:B7STkx4oLCFyPQmXLCeyIxHYdiIwA

Malware Config

Targets

    • Target

      d8ad93b59ae58f4b186667369d741bc7_JaffaCakes118

    • Size

      678KB

    • MD5

      d8ad93b59ae58f4b186667369d741bc7

    • SHA1

      e6b9a6eec740207b10bb7ebb7bc5dc975de2e17a

    • SHA256

      1ba05bebc1794f4ce94e32869d9e1cc7815a9ea50a447f7dd8114dfd652a39f2

    • SHA512

      d42f6764fccb2115113a32261b1aaec13b9a88487e44890f710f2a601eb63b34c986eb2cd2a6e5de0992da46eedd6a122cc156e38162d7d98ddd1d1f1c866ff7

    • SSDEEP

      12288:BlJSTkdfjgPrpknLC31PqPF3Z4mxx6oCtw0fIxOM9qRTiIwA:B7STkx4oLCFyPQmXLCeyIxHYdiIwA

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks