General

  • Target

    e79185fd59775607c4ffd8e45743d38f_JaffaCakes118

  • Size

    275KB

  • Sample

    240917-ydqy7s1epj

  • MD5

    e79185fd59775607c4ffd8e45743d38f

  • SHA1

    5bb6590f19d464ec4718ff7948a5f25f486997d6

  • SHA256

    93f92dfa3bc2cd8983c343838dd2e212ad9706274459d6176de596dcbbafb0f5

  • SHA512

    bb48f1ac4ada386618fec95bea71ab156f071e352804860f9c13da7430caac1cb2b3e72e73351188cc2b71dff14227976fca6de759303c620cf1704ffa2ef808

  • SSDEEP

    6144:FV0FJQSCAmEzAD0ev91NIpbVxBjZOI9lL5EpbMuR1nFYDNj7iMoK:AFJQSCA/Q0m9SHrd9pK1HRfY4MJ

Malware Config

Targets

    • Target

      e79185fd59775607c4ffd8e45743d38f_JaffaCakes118

    • Size

      275KB

    • MD5

      e79185fd59775607c4ffd8e45743d38f

    • SHA1

      5bb6590f19d464ec4718ff7948a5f25f486997d6

    • SHA256

      93f92dfa3bc2cd8983c343838dd2e212ad9706274459d6176de596dcbbafb0f5

    • SHA512

      bb48f1ac4ada386618fec95bea71ab156f071e352804860f9c13da7430caac1cb2b3e72e73351188cc2b71dff14227976fca6de759303c620cf1704ffa2ef808

    • SSDEEP

      6144:FV0FJQSCAmEzAD0ev91NIpbVxBjZOI9lL5EpbMuR1nFYDNj7iMoK:AFJQSCA/Q0m9SHrd9pK1HRfY4MJ

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks