General

  • Target

    e8c4028bb4b7fd2789a90a85cfe7832a_JaffaCakes118

  • Size

    291KB

  • Sample

    240918-k1ggdssemb

  • MD5

    e8c4028bb4b7fd2789a90a85cfe7832a

  • SHA1

    791bb33b62f360372462d623e205e3e849ad131c

  • SHA256

    de8ade4209201c9a86d8440240453cbc2868fc07c6eac6bdaf250afd168c7532

  • SHA512

    bcfb4ae48e7e715f28a839bc9e456e1737a662eb3d9bc7cfaefb536e967ce83734693b44ef85bd9d263a3311fa5fc1d2346d2be1262f967b8b5c6fc60981d1f6

  • SSDEEP

    6144:LwBakfPVmkCqrhYtQR+E/a78BwMm5vGlN0j:Lwck3nYtQR+E/GUw1

Malware Config

Targets

    • Target

      e8c4028bb4b7fd2789a90a85cfe7832a_JaffaCakes118

    • Size

      291KB

    • MD5

      e8c4028bb4b7fd2789a90a85cfe7832a

    • SHA1

      791bb33b62f360372462d623e205e3e849ad131c

    • SHA256

      de8ade4209201c9a86d8440240453cbc2868fc07c6eac6bdaf250afd168c7532

    • SHA512

      bcfb4ae48e7e715f28a839bc9e456e1737a662eb3d9bc7cfaefb536e967ce83734693b44ef85bd9d263a3311fa5fc1d2346d2be1262f967b8b5c6fc60981d1f6

    • SSDEEP

      6144:LwBakfPVmkCqrhYtQR+E/a78BwMm5vGlN0j:Lwck3nYtQR+E/GUw1

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks