General

  • Target

    e4275965a24f0e0cf7e83c07007a75de_JaffaCakes118

  • Size

    60KB

  • Sample

    240916-gs9anasbpg

  • MD5

    e4275965a24f0e0cf7e83c07007a75de

  • SHA1

    58c6575f9916ce9744feb5a277899b510a003a79

  • SHA256

    fb54e212267f477a181b828ead70b1c74dfae41b0125aaadb032dac6f00db144

  • SHA512

    9ede2077cb0418ee1e46b2cc2f90409652fa2377e77469f8794838cf425edf919c722a854d9fe65ec956456e3499e7c7ce989c2570da2d626a3502708dcdeea3

  • SSDEEP

    1536:km7wjsVTJ+p3JrkGLawHE/E2j+Ei+Hj2aBzybXNEH8ocdVcT:P+sVT45mn/bjni8DBebXNA8oucT

Malware Config

Targets

    • Target

      e4275965a24f0e0cf7e83c07007a75de_JaffaCakes118

    • Size

      60KB

    • MD5

      e4275965a24f0e0cf7e83c07007a75de

    • SHA1

      58c6575f9916ce9744feb5a277899b510a003a79

    • SHA256

      fb54e212267f477a181b828ead70b1c74dfae41b0125aaadb032dac6f00db144

    • SHA512

      9ede2077cb0418ee1e46b2cc2f90409652fa2377e77469f8794838cf425edf919c722a854d9fe65ec956456e3499e7c7ce989c2570da2d626a3502708dcdeea3

    • SSDEEP

      1536:km7wjsVTJ+p3JrkGLawHE/E2j+Ei+Hj2aBzybXNEH8ocdVcT:P+sVT45mn/bjni8DBebXNA8oucT

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks