General

  • Target

    e22ee7151c2cebbeb5f0b48097ab49bd_JaffaCakes118

  • Size

    683KB

  • Sample

    240915-lkvvhsxepr

  • MD5

    e22ee7151c2cebbeb5f0b48097ab49bd

  • SHA1

    5a3ea5db572b965729d7ea62576369b314bd4e98

  • SHA256

    f00e2fddaa320e0a37f6b817cea9189bce85acd96c4c20dbd11c2c795ef8011f

  • SHA512

    32e2f1d4d0b601e328d461c5f28df2a273b7988af8aff484fe93c4381fd91cf44fb984f2737de10b610ff431371d1e814d79aacf52077f0fdc74a067c305e04a

  • SSDEEP

    12288:tsWdVgX1MwKcjZ+fEEIjEOyk/AXqUhKfa4fQfcW39o+esvT+:Nzg6wKcV+sECkXuD4HVesvT

Malware Config

Targets

    • Target

      e22ee7151c2cebbeb5f0b48097ab49bd_JaffaCakes118

    • Size

      683KB

    • MD5

      e22ee7151c2cebbeb5f0b48097ab49bd

    • SHA1

      5a3ea5db572b965729d7ea62576369b314bd4e98

    • SHA256

      f00e2fddaa320e0a37f6b817cea9189bce85acd96c4c20dbd11c2c795ef8011f

    • SHA512

      32e2f1d4d0b601e328d461c5f28df2a273b7988af8aff484fe93c4381fd91cf44fb984f2737de10b610ff431371d1e814d79aacf52077f0fdc74a067c305e04a

    • SSDEEP

      12288:tsWdVgX1MwKcjZ+fEEIjEOyk/AXqUhKfa4fQfcW39o+esvT+:Nzg6wKcV+sECkXuD4HVesvT

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks