General

  • Target

    d9becae8e9f87d05b890fddc56d1df6c_JaffaCakes118

  • Size

    369KB

  • Sample

    240911-gql3cawbql

  • MD5

    d9becae8e9f87d05b890fddc56d1df6c

  • SHA1

    2816e9e91004e5106fbaea997094882c1ef86792

  • SHA256

    f48455c3a87ecb3c39b4e0813a386e5abd1c063b1db39a5590ad07817d6be911

  • SHA512

    59c71303684a751622118b691eeb660363595a080ebde53c4c14ec82405aa8b26545f9ed72487701568ab250100fe602b79ee2d823de2163aab9e59ee77ad936

  • SSDEEP

    6144:9a08DfOXVn1Lwv7IU/zcPDK79CPrfWaTHzdBKDs888mhBF5pey2f18KXf:X8DfC4cPDM9aNBKDs883hBQy8XP

Malware Config

Targets

    • Target

      d9becae8e9f87d05b890fddc56d1df6c_JaffaCakes118

    • Size

      369KB

    • MD5

      d9becae8e9f87d05b890fddc56d1df6c

    • SHA1

      2816e9e91004e5106fbaea997094882c1ef86792

    • SHA256

      f48455c3a87ecb3c39b4e0813a386e5abd1c063b1db39a5590ad07817d6be911

    • SHA512

      59c71303684a751622118b691eeb660363595a080ebde53c4c14ec82405aa8b26545f9ed72487701568ab250100fe602b79ee2d823de2163aab9e59ee77ad936

    • SSDEEP

      6144:9a08DfOXVn1Lwv7IU/zcPDK79CPrfWaTHzdBKDs888mhBF5pey2f18KXf:X8DfC4cPDM9aNBKDs883hBQy8XP

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks