General

  • Target

    daddff1e846d13ac72537e051a19977c_JaffaCakes118

  • Size

    751KB

  • Sample

    240911-v3v3nstalk

  • MD5

    daddff1e846d13ac72537e051a19977c

  • SHA1

    5339e582515e0bf41686d36c2e07fe02d7e5d13e

  • SHA256

    bb21761ca2f6ad6e7a5a58cbf09f1e855082fdf9704cc7989500d30e8e9d6394

  • SHA512

    bd023dd4d2f4e8398e7ea6724d721554aebe2745a489c9d20d5ee4c130e7637d2ec6f1fe5615fd45ccdc08bfc641b4849baaca89f40bab2a36ca9c427eacdea2

  • SSDEEP

    12288:a8k37stBEScWoGdqDkg16l9xne+73U9sPG7So1OgYqTQEaTO2:a8kL0BfTdqDktl39A+01OBqTQpC2

Malware Config

Targets

    • Target

      daddff1e846d13ac72537e051a19977c_JaffaCakes118

    • Size

      751KB

    • MD5

      daddff1e846d13ac72537e051a19977c

    • SHA1

      5339e582515e0bf41686d36c2e07fe02d7e5d13e

    • SHA256

      bb21761ca2f6ad6e7a5a58cbf09f1e855082fdf9704cc7989500d30e8e9d6394

    • SHA512

      bd023dd4d2f4e8398e7ea6724d721554aebe2745a489c9d20d5ee4c130e7637d2ec6f1fe5615fd45ccdc08bfc641b4849baaca89f40bab2a36ca9c427eacdea2

    • SSDEEP

      12288:a8k37stBEScWoGdqDkg16l9xne+73U9sPG7So1OgYqTQEaTO2:a8kL0BfTdqDktl39A+01OBqTQpC2

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks