General

  • Target

    dbeca26bcb5444bbe2692893e9a64c39_JaffaCakes118

  • Size

    585KB

  • Sample

    240912-gh7zvatgrd

  • MD5

    dbeca26bcb5444bbe2692893e9a64c39

  • SHA1

    126f10c8a68a5735fba97c859552bb2af76b0160

  • SHA256

    a194ff906b8385771fe6de68546e76c38d4e0c8808f191d35a797b69931a0b8a

  • SHA512

    1091e7a41df63aa7143ecbd8fd3dc6d44443640532e1504596085147af07e6eba7f16bb2e1af7b063d314330551904df0989c7ad417262edd705966ba5e8c2c2

  • SSDEEP

    12288:XCPykYTNuzMhP4DQJ6Yu2xmNEg8F3Z4mxxADqVTVOCF:XCPiTNhhw8JnutE5QmXXVTzF

Malware Config

Targets

    • Target

      dbeca26bcb5444bbe2692893e9a64c39_JaffaCakes118

    • Size

      585KB

    • MD5

      dbeca26bcb5444bbe2692893e9a64c39

    • SHA1

      126f10c8a68a5735fba97c859552bb2af76b0160

    • SHA256

      a194ff906b8385771fe6de68546e76c38d4e0c8808f191d35a797b69931a0b8a

    • SHA512

      1091e7a41df63aa7143ecbd8fd3dc6d44443640532e1504596085147af07e6eba7f16bb2e1af7b063d314330551904df0989c7ad417262edd705966ba5e8c2c2

    • SSDEEP

      12288:XCPykYTNuzMhP4DQJ6Yu2xmNEg8F3Z4mxxADqVTVOCF:XCPiTNhhw8JnutE5QmXXVTzF

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks