General

  • Target

    db0391a8fc003895d564c133ad7a78a9_JaffaCakes118

  • Size

    681KB

  • Sample

    240911-xkyf7axanl

  • MD5

    db0391a8fc003895d564c133ad7a78a9

  • SHA1

    b08767428fe7033d96a54d50732deaa71053d3c1

  • SHA256

    9d4c2cbb3720c61308739a4a13237cd9a8263cd56c10bbe9bd1f05099041558e

  • SHA512

    b1e8c0b4604e26c1b950f9db9d40ad656f79f924adcd25e976cc51c37d616b0adb46c028848e145c48ddc2a356cc7ed2cfed40a229b188f4224f14786cdc9474

  • SSDEEP

    12288:JPPENkuVmb4nzfPbe2NJ8adcgjmEuTdC2Q174KyBvdL3Q:JPPEuTb4nzTZTUEM3bVL

Malware Config

Targets

    • Target

      db0391a8fc003895d564c133ad7a78a9_JaffaCakes118

    • Size

      681KB

    • MD5

      db0391a8fc003895d564c133ad7a78a9

    • SHA1

      b08767428fe7033d96a54d50732deaa71053d3c1

    • SHA256

      9d4c2cbb3720c61308739a4a13237cd9a8263cd56c10bbe9bd1f05099041558e

    • SHA512

      b1e8c0b4604e26c1b950f9db9d40ad656f79f924adcd25e976cc51c37d616b0adb46c028848e145c48ddc2a356cc7ed2cfed40a229b188f4224f14786cdc9474

    • SSDEEP

      12288:JPPENkuVmb4nzfPbe2NJ8adcgjmEuTdC2Q174KyBvdL3Q:JPPEuTb4nzTZTUEM3bVL

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

MITRE ATT&CK Enterprise v15

Tasks