General

  • Target

    eb903ba4825444383a00ec563caa0544_JaffaCakes118

  • Size

    680KB

  • Sample

    240919-r7lg9atgnf

  • MD5

    eb903ba4825444383a00ec563caa0544

  • SHA1

    88e546b3f99a16ac01440177d936eef129d97972

  • SHA256

    ee88f0c7776e084a5bbd631971c50dbda6190cb1d76aff7d34f14bd766809483

  • SHA512

    a1cf64622387b44d491edbd370ed43d35efb07338c7337170b010a93422c3efb60b50e6a9c80cf9f3c9e770b18c22f87918b3cac7c7117cde9bd1da5885e1124

  • SSDEEP

    12288:zw1ESd+7yGp93lW9WASbOG04zMw8/HAVUh9Hc8HYfTTx:nT7T93lW9qbOn4YL/aUh91HsTTx

Malware Config

Targets

    • Target

      eb903ba4825444383a00ec563caa0544_JaffaCakes118

    • Size

      680KB

    • MD5

      eb903ba4825444383a00ec563caa0544

    • SHA1

      88e546b3f99a16ac01440177d936eef129d97972

    • SHA256

      ee88f0c7776e084a5bbd631971c50dbda6190cb1d76aff7d34f14bd766809483

    • SHA512

      a1cf64622387b44d491edbd370ed43d35efb07338c7337170b010a93422c3efb60b50e6a9c80cf9f3c9e770b18c22f87918b3cac7c7117cde9bd1da5885e1124

    • SSDEEP

      12288:zw1ESd+7yGp93lW9WASbOG04zMw8/HAVUh9Hc8HYfTTx:nT7T93lW9qbOn4YL/aUh91HsTTx

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks