General

  • Target

    e93a469dde72e2eb511f7b351a8626fc_JaffaCakes118

  • Size

    25KB

  • Sample

    240918-qskrqsvakk

  • MD5

    e93a469dde72e2eb511f7b351a8626fc

  • SHA1

    c00642aa2193090301e58ba8b5000dec2f92ffa3

  • SHA256

    90e166067e9c4feaae98bd81cd7f875010a25061dab66d42889ac189209922a3

  • SHA512

    a177de96d0221b2191c0045218838a59f1aa7b6c644538d1535310f1fa1187f1e5c25c27c32865d02440f3b8e64656f9424044489d0794866e010c72f40f6816

  • SSDEEP

    384:0wm+8TpFywSLQjzu/RQ+mLyvXYu5+z0Y3wil6NPgrE+Ioqf+E/Uu:0TJpFHSLyupC2/kzww/zIGE/X

Malware Config

Targets

    • Target

      e93a469dde72e2eb511f7b351a8626fc_JaffaCakes118

    • Size

      25KB

    • MD5

      e93a469dde72e2eb511f7b351a8626fc

    • SHA1

      c00642aa2193090301e58ba8b5000dec2f92ffa3

    • SHA256

      90e166067e9c4feaae98bd81cd7f875010a25061dab66d42889ac189209922a3

    • SHA512

      a177de96d0221b2191c0045218838a59f1aa7b6c644538d1535310f1fa1187f1e5c25c27c32865d02440f3b8e64656f9424044489d0794866e010c72f40f6816

    • SSDEEP

      384:0wm+8TpFywSLQjzu/RQ+mLyvXYu5+z0Y3wil6NPgrE+Ioqf+E/Uu:0TJpFHSLyupC2/kzww/zIGE/X

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks