General

  • Target

    e0b99d316530f3345d1017306dca9ad6_JaffaCakes118

  • Size

    678KB

  • Sample

    240914-wkhkasxbqn

  • MD5

    e0b99d316530f3345d1017306dca9ad6

  • SHA1

    4dd6b4ed25f8ecbb55033f47886fb5d3c30a7717

  • SHA256

    1689b1cf2eb49c2ca4588505b1455d77a7f50c99c85622687485772663635488

  • SHA512

    2b7025595c8a1791ec7becdca6d5d5231df5bf4de74b4690c5638310ce68aedd581eb810d564777a913745e57df57017b40e8cc2cddb06df898e62bb566b0933

  • SSDEEP

    12288:3sWdVgX1MwKcjZ+fEEIjEOyk/AXqUSJvA4fQfcW39ot6iyXavT22T:3zg6wKcV+sECkXOh4Hu6iNvTZT

Malware Config

Targets

    • Target

      e0b99d316530f3345d1017306dca9ad6_JaffaCakes118

    • Size

      678KB

    • MD5

      e0b99d316530f3345d1017306dca9ad6

    • SHA1

      4dd6b4ed25f8ecbb55033f47886fb5d3c30a7717

    • SHA256

      1689b1cf2eb49c2ca4588505b1455d77a7f50c99c85622687485772663635488

    • SHA512

      2b7025595c8a1791ec7becdca6d5d5231df5bf4de74b4690c5638310ce68aedd581eb810d564777a913745e57df57017b40e8cc2cddb06df898e62bb566b0933

    • SSDEEP

      12288:3sWdVgX1MwKcjZ+fEEIjEOyk/AXqUSJvA4fQfcW39ot6iyXavT22T:3zg6wKcV+sECkXOh4Hu6iNvTZT

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks