General

  • Target

    dd766b64c60d9cf8d9af6f026c584880_JaffaCakes118

  • Size

    306KB

  • Sample

    240913-cm9l1sygma

  • MD5

    dd766b64c60d9cf8d9af6f026c584880

  • SHA1

    f5d17993a0c9095c664f63b02e68390e004f76e2

  • SHA256

    e097e0f3e886bb84fc58910bea444749b8fbe89f09f505cfa0448e7753b775af

  • SHA512

    4ef917c2d82a6880182e8157518726df0419f65082781af6e2e12c6279ca696a4639d3fb3fba6e76d7fb71bc9969440f06d296a8cdf6ef932b065f42c0595cdf

  • SSDEEP

    6144:U010c2b/DhQw9QgpDowFSL1u2ApUTyGouITOkIxYy80:luJDhxOgpfSE2ApCyigPIYyL

Malware Config

Targets

    • Target

      dd766b64c60d9cf8d9af6f026c584880_JaffaCakes118

    • Size

      306KB

    • MD5

      dd766b64c60d9cf8d9af6f026c584880

    • SHA1

      f5d17993a0c9095c664f63b02e68390e004f76e2

    • SHA256

      e097e0f3e886bb84fc58910bea444749b8fbe89f09f505cfa0448e7753b775af

    • SHA512

      4ef917c2d82a6880182e8157518726df0419f65082781af6e2e12c6279ca696a4639d3fb3fba6e76d7fb71bc9969440f06d296a8cdf6ef932b065f42c0595cdf

    • SSDEEP

      6144:U010c2b/DhQw9QgpDowFSL1u2ApUTyGouITOkIxYy80:luJDhxOgpfSE2ApCyigPIYyL

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks