General

  • Target

    d90e3a1e3834e636801ee70bbd1c88b3_JaffaCakes118

  • Size

    517KB

  • Sample

    240910-z96vzaxdjh

  • MD5

    d90e3a1e3834e636801ee70bbd1c88b3

  • SHA1

    2ea151fa8b1ee7856ebb7275366b9a247f659207

  • SHA256

    3c086d056fc272b192fa51b77989cc1615f9b47de20014ab28c9a7296ce286a6

  • SHA512

    0a6e67635ec5989d0b1864befc29f426801aa22827815e62801fff2e91bdc92f27f21c3d4bb40d884dee631a6f1d320d5f96131e1f7abc1ab829b1d9752aaac4

  • SSDEEP

    6144:4y1/wLFjc2TLtBIx/X3n+0PUzx1JoaTGOGZ5H/z9akcTNszqdmb8/XV3qVfUR2jK:DoLFjc2T32/X3nqxEQkcZmQ/twUR2CL

Malware Config

Targets

    • Target

      d90e3a1e3834e636801ee70bbd1c88b3_JaffaCakes118

    • Size

      517KB

    • MD5

      d90e3a1e3834e636801ee70bbd1c88b3

    • SHA1

      2ea151fa8b1ee7856ebb7275366b9a247f659207

    • SHA256

      3c086d056fc272b192fa51b77989cc1615f9b47de20014ab28c9a7296ce286a6

    • SHA512

      0a6e67635ec5989d0b1864befc29f426801aa22827815e62801fff2e91bdc92f27f21c3d4bb40d884dee631a6f1d320d5f96131e1f7abc1ab829b1d9752aaac4

    • SSDEEP

      6144:4y1/wLFjc2TLtBIx/X3n+0PUzx1JoaTGOGZ5H/z9akcTNszqdmb8/XV3qVfUR2jK:DoLFjc2T32/X3nqxEQkcZmQ/twUR2CL

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks