General

  • Target

    e58f40db825b4db9143bbe37d3d719e7_JaffaCakes118

  • Size

    544KB

  • Sample

    240916-zsfx8azanp

  • MD5

    e58f40db825b4db9143bbe37d3d719e7

  • SHA1

    254fb58c6a04f152bc852c16c89f4b357789965e

  • SHA256

    18158160ad70f154ce72cccc19ebf4d791b66206db81e915bd53f4cfa724ce7f

  • SHA512

    4791634192d5fddfd79c5c74c83cab45cb940f8186f24761114966f224514d7739f077134b208b3cce4760aba9a9f8108a13bb3de70e27fc09ecdfce57604acf

  • SSDEEP

    12288:f8sFz3pC+ZF3Z4mxxFCknbPHZzOS9kRf2+lf:f9hZtQmXlbxOS9Cf2I

Malware Config

Targets

    • Target

      e58f40db825b4db9143bbe37d3d719e7_JaffaCakes118

    • Size

      544KB

    • MD5

      e58f40db825b4db9143bbe37d3d719e7

    • SHA1

      254fb58c6a04f152bc852c16c89f4b357789965e

    • SHA256

      18158160ad70f154ce72cccc19ebf4d791b66206db81e915bd53f4cfa724ce7f

    • SHA512

      4791634192d5fddfd79c5c74c83cab45cb940f8186f24761114966f224514d7739f077134b208b3cce4760aba9a9f8108a13bb3de70e27fc09ecdfce57604acf

    • SSDEEP

      12288:f8sFz3pC+ZF3Z4mxxFCknbPHZzOS9kRf2+lf:f9hZtQmXlbxOS9Cf2I

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks