General

  • Target

    ec22c5788cbde589c3ffa799c83065ea_JaffaCakes118

  • Size

    520KB

  • Sample

    240919-y8frqayhnn

  • MD5

    ec22c5788cbde589c3ffa799c83065ea

  • SHA1

    905ded159895b509987f4a8d7b01e493577acd44

  • SHA256

    36fe05f03f9e6f218d318baec249e1b04a46003ba08db5bf213b2cab488fcbc3

  • SHA512

    b5e17c38e0804eed7cf1697602654f57297352ddfe09129642e8abc400257aff90ee3b372e7480559c440d835f4aa1584ecdd1634fc5e216cc1a1fcb152df131

  • SSDEEP

    12288:HptmIaomgFprkcxpB8F3Z4mxx5aOeKxTVJCwj+mYi:H/BrjFl8QmX553HFSTi

Malware Config

Targets

    • Target

      ec22c5788cbde589c3ffa799c83065ea_JaffaCakes118

    • Size

      520KB

    • MD5

      ec22c5788cbde589c3ffa799c83065ea

    • SHA1

      905ded159895b509987f4a8d7b01e493577acd44

    • SHA256

      36fe05f03f9e6f218d318baec249e1b04a46003ba08db5bf213b2cab488fcbc3

    • SHA512

      b5e17c38e0804eed7cf1697602654f57297352ddfe09129642e8abc400257aff90ee3b372e7480559c440d835f4aa1584ecdd1634fc5e216cc1a1fcb152df131

    • SSDEEP

      12288:HptmIaomgFprkcxpB8F3Z4mxx5aOeKxTVJCwj+mYi:H/BrjFl8QmX553HFSTi

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks