General

  • Target

    e3664ebb55203a64ce653e9e24f42c94_JaffaCakes118

  • Size

    287KB

  • Sample

    240915-1eezfatcjf

  • MD5

    e3664ebb55203a64ce653e9e24f42c94

  • SHA1

    c114ecdecf28ce2dda58ee91f7991713b23d9bf6

  • SHA256

    843204454b03cdb889c6fe9f5138c6839bbb437790ded86297e4a430cd2db626

  • SHA512

    0421298e16b56309561c816025b77e4490c3a86455081b7e4742e0ad383d9582ede36d233720719ff26cd5811f78cf68ed9ca8d75746d29bee95d10916555e5a

  • SSDEEP

    6144:HlXqOPWOg9YylMQlHtvVrdP4ss0mMlr6RCG4ugjd6plt0:Hl6OaYylVNtvP4f0ACTuWIK

Malware Config

Targets

    • Target

      e3664ebb55203a64ce653e9e24f42c94_JaffaCakes118

    • Size

      287KB

    • MD5

      e3664ebb55203a64ce653e9e24f42c94

    • SHA1

      c114ecdecf28ce2dda58ee91f7991713b23d9bf6

    • SHA256

      843204454b03cdb889c6fe9f5138c6839bbb437790ded86297e4a430cd2db626

    • SHA512

      0421298e16b56309561c816025b77e4490c3a86455081b7e4742e0ad383d9582ede36d233720719ff26cd5811f78cf68ed9ca8d75746d29bee95d10916555e5a

    • SSDEEP

      6144:HlXqOPWOg9YylMQlHtvVrdP4ss0mMlr6RCG4ugjd6plt0:Hl6OaYylVNtvP4f0ACTuWIK

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks