General

  • Target

    e0ac566b245f8cfb927cbe2681744c1d_JaffaCakes118

  • Size

    665KB

  • Sample

    240914-v2verawflh

  • MD5

    e0ac566b245f8cfb927cbe2681744c1d

  • SHA1

    e3858a1af595e29d65071e57196a23eb9eb6846b

  • SHA256

    c831ff464aaa7ba85c86cf3a6e90428ce004637f226d0fd05253214eee37114f

  • SHA512

    47d80d6557ee5d6bcf9e72f9a28f47fbbaf3bff43c930331ec4557ab2c149d60bd3f62922cd63237aaf9db4915ac6fbbee07c9e885f95c4a1d7860d3a777ebf0

  • SSDEEP

    12288:LMUNmhVaz4oU+OKxUwg/oMSDVnnEKYdGSSzoAF3Z4mxxGJ9oZHMdoJGtQDWYS:IUNmnaz4hKqJQMKnExcoAQmXrpM2JMI4

Malware Config

Targets

    • Target

      e0ac566b245f8cfb927cbe2681744c1d_JaffaCakes118

    • Size

      665KB

    • MD5

      e0ac566b245f8cfb927cbe2681744c1d

    • SHA1

      e3858a1af595e29d65071e57196a23eb9eb6846b

    • SHA256

      c831ff464aaa7ba85c86cf3a6e90428ce004637f226d0fd05253214eee37114f

    • SHA512

      47d80d6557ee5d6bcf9e72f9a28f47fbbaf3bff43c930331ec4557ab2c149d60bd3f62922cd63237aaf9db4915ac6fbbee07c9e885f95c4a1d7860d3a777ebf0

    • SSDEEP

      12288:LMUNmhVaz4oU+OKxUwg/oMSDVnnEKYdGSSzoAF3Z4mxxGJ9oZHMdoJGtQDWYS:IUNmnaz4hKqJQMKnExcoAQmXrpM2JMI4

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks