General

  • Target

    e688818d6776936dfd1808e5852d7b30_JaffaCakes118

  • Size

    24KB

  • Sample

    240917-lm2e3swdka

  • MD5

    e688818d6776936dfd1808e5852d7b30

  • SHA1

    94eeae4b88ac5695b70b95f40f61aa2d0678a344

  • SHA256

    9f66bb5cdc1e7a430f42615b573e50497d47098a12359c1b7ac78e86fa2adb85

  • SHA512

    8496448221d8999dfb0f20155ffc713cb197e0c4566e162c308ca22c0d8302efc8f29c7a82970fcec8d75230124bb1e0a10fefaecdcf5c32c4ada9aeb98a0277

  • SSDEEP

    384:yMT3pJzu/RQ+mLyvXYu5+z0Z9lx8LSaQB4rMPJaBZ7XLYCzx59azRHo:tupC2/kYDxsS5yQRazHzxr8o

Malware Config

Targets

    • Target

      e688818d6776936dfd1808e5852d7b30_JaffaCakes118

    • Size

      24KB

    • MD5

      e688818d6776936dfd1808e5852d7b30

    • SHA1

      94eeae4b88ac5695b70b95f40f61aa2d0678a344

    • SHA256

      9f66bb5cdc1e7a430f42615b573e50497d47098a12359c1b7ac78e86fa2adb85

    • SHA512

      8496448221d8999dfb0f20155ffc713cb197e0c4566e162c308ca22c0d8302efc8f29c7a82970fcec8d75230124bb1e0a10fefaecdcf5c32c4ada9aeb98a0277

    • SSDEEP

      384:yMT3pJzu/RQ+mLyvXYu5+z0Z9lx8LSaQB4rMPJaBZ7XLYCzx59azRHo:tupC2/kYDxsS5yQRazHzxr8o

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks