General

  • Target

    e17f8d9173fd5f30705ba184883b6163_JaffaCakes118

  • Size

    144KB

  • Sample

    240915-ckskqazgpc

  • MD5

    e17f8d9173fd5f30705ba184883b6163

  • SHA1

    ac10dc8e92306d65f6bc4052392dac409083e64e

  • SHA256

    23e637f7f022adc41d60825756ce07ab14384c8adf3a8ef59bcb05a1f7f94cfe

  • SHA512

    7928e259a025d3a2be88efc75ca20b20b52397f4979af63157631801615651b79d1b7509725ea55e682d07966a739827cdc37d65f708a93737f611439e3694f1

  • SSDEEP

    1536:YCqlwmQJn6NAooqurT0GQi9SLk+3/n+P8UdNMyZ0QGM6:UIo+/9SQS/y8MeyZRI

Malware Config

Targets

    • Target

      e17f8d9173fd5f30705ba184883b6163_JaffaCakes118

    • Size

      144KB

    • MD5

      e17f8d9173fd5f30705ba184883b6163

    • SHA1

      ac10dc8e92306d65f6bc4052392dac409083e64e

    • SHA256

      23e637f7f022adc41d60825756ce07ab14384c8adf3a8ef59bcb05a1f7f94cfe

    • SHA512

      7928e259a025d3a2be88efc75ca20b20b52397f4979af63157631801615651b79d1b7509725ea55e682d07966a739827cdc37d65f708a93737f611439e3694f1

    • SSDEEP

      1536:YCqlwmQJn6NAooqurT0GQi9SLk+3/n+P8UdNMyZ0QGM6:UIo+/9SQS/y8MeyZRI

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks