General

  • Target

    df3895975a805f907de3db2456f225ff_JaffaCakes118

  • Size

    675KB

  • Sample

    240914-bhcaaayflq

  • MD5

    df3895975a805f907de3db2456f225ff

  • SHA1

    4c41e1f8deb9389a16cff9c5b71b50b3d271fd4f

  • SHA256

    8efd99d319cb9a08677a942c7481c5aab5f8daa5ea1b1e9b4c096d1802eddd12

  • SHA512

    e9f5b31a1527b7c568cb76c21b17a297366f49fae240e383d75c39ae55859cd2b54ed22d5b2ebfd137e51bd2b4208f3fc1f148a7c3483cd082f496abff307bac

  • SSDEEP

    12288:Jrv0R6fdbfOMX6espTcQG0RXvhfdAWSC8eKP8+TuzZw6:FK6fZOMXBsebChlPfK0+TWe6

Malware Config

Targets

    • Target

      df3895975a805f907de3db2456f225ff_JaffaCakes118

    • Size

      675KB

    • MD5

      df3895975a805f907de3db2456f225ff

    • SHA1

      4c41e1f8deb9389a16cff9c5b71b50b3d271fd4f

    • SHA256

      8efd99d319cb9a08677a942c7481c5aab5f8daa5ea1b1e9b4c096d1802eddd12

    • SHA512

      e9f5b31a1527b7c568cb76c21b17a297366f49fae240e383d75c39ae55859cd2b54ed22d5b2ebfd137e51bd2b4208f3fc1f148a7c3483cd082f496abff307bac

    • SSDEEP

      12288:Jrv0R6fdbfOMX6espTcQG0RXvhfdAWSC8eKP8+TuzZw6:FK6fZOMXBsebChlPfK0+TWe6

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks