General

  • Target

    e30e02b8bc9b65d29c6565bfbd44e6da_JaffaCakes118

  • Size

    691KB

  • Sample

    240915-wdlndawcjm

  • MD5

    e30e02b8bc9b65d29c6565bfbd44e6da

  • SHA1

    5c6bb6269958d7c7de592851fed35ee4f72a52a5

  • SHA256

    0c683d02c045cc594f116a4eac2c58f0985823c432afa7275f29e5955c6ff5e5

  • SHA512

    831f374df5e26d733a9d0df8509b8aa6f2b90b2b1e2df1f07e3e31493c90552c1acae5b51d894d8fdeaef68a4247f1ae8fdb55e6dd54a62456ee36a407a7291d

  • SSDEEP

    12288:UGMz5TT+i9DRLo4jepFQHtew1g9Fnww/YBLLUGYD8+TPcN8:HI5n9DuHDAU9FnwF9m8+TPR

Malware Config

Targets

    • Target

      e30e02b8bc9b65d29c6565bfbd44e6da_JaffaCakes118

    • Size

      691KB

    • MD5

      e30e02b8bc9b65d29c6565bfbd44e6da

    • SHA1

      5c6bb6269958d7c7de592851fed35ee4f72a52a5

    • SHA256

      0c683d02c045cc594f116a4eac2c58f0985823c432afa7275f29e5955c6ff5e5

    • SHA512

      831f374df5e26d733a9d0df8509b8aa6f2b90b2b1e2df1f07e3e31493c90552c1acae5b51d894d8fdeaef68a4247f1ae8fdb55e6dd54a62456ee36a407a7291d

    • SSDEEP

      12288:UGMz5TT+i9DRLo4jepFQHtew1g9Fnww/YBLLUGYD8+TPcN8:HI5n9DuHDAU9FnwF9m8+TPR

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks