General

  • Target

    e9b02987797681bb98ea1da58c975164_JaffaCakes118

  • Size

    448KB

  • Sample

    240918-wn9sysvepc

  • MD5

    e9b02987797681bb98ea1da58c975164

  • SHA1

    b19df259aaf2259c8a1bcf4876c4b85c789bdaa9

  • SHA256

    8eaa9d8824a50d189f3b11628494820daf6d6a229c9e370dbc24f13a333b1994

  • SHA512

    ec63b3f3768cb7d813ce1f9dae7795358dc9e77cc119589c2d516e2f6527c2039b3d3c70a508d75edf1703ca914f18facf16d98c16f7e2d803afb181422b3759

  • SSDEEP

    12288:vmrQVE41d00+3MdklDhvC7V9fz3gI5QGcTsdz5qPx:vmrOX1u0I9lDh67DzgWcsx5q

Malware Config

Targets

    • Target

      e9b02987797681bb98ea1da58c975164_JaffaCakes118

    • Size

      448KB

    • MD5

      e9b02987797681bb98ea1da58c975164

    • SHA1

      b19df259aaf2259c8a1bcf4876c4b85c789bdaa9

    • SHA256

      8eaa9d8824a50d189f3b11628494820daf6d6a229c9e370dbc24f13a333b1994

    • SHA512

      ec63b3f3768cb7d813ce1f9dae7795358dc9e77cc119589c2d516e2f6527c2039b3d3c70a508d75edf1703ca914f18facf16d98c16f7e2d803afb181422b3759

    • SSDEEP

      12288:vmrQVE41d00+3MdklDhvC7V9fz3gI5QGcTsdz5qPx:vmrOX1u0I9lDh67DzgWcsx5q

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks