General

  • Target

    ec784e4049fcf58bfc91a1e7be271146_JaffaCakes118

  • Size

    670KB

  • Sample

    240920-amjpgsyeqc

  • MD5

    ec784e4049fcf58bfc91a1e7be271146

  • SHA1

    b5267e82cb511b6cad7dc65f0931ee315b80b49a

  • SHA256

    0177a2d00514cf68b9136e435bf76c248387a21b2713873f0775d3c2c36cccab

  • SHA512

    a480952b4dc5a7228eae4bd9e8e2dd35a2f45da0aa1a44e48e2777c0d4d02c05583abed5d55d237bea5001fe08861f72b0a332365e196c76fa293b34c262ec68

  • SSDEEP

    12288:jabT0UdwF1Kx2AUckGFBsl8VUA27XPhaM2P5AdT4:WbgF1KEhckssGVrKhaM8AdT4

Malware Config

Targets

    • Target

      ec784e4049fcf58bfc91a1e7be271146_JaffaCakes118

    • Size

      670KB

    • MD5

      ec784e4049fcf58bfc91a1e7be271146

    • SHA1

      b5267e82cb511b6cad7dc65f0931ee315b80b49a

    • SHA256

      0177a2d00514cf68b9136e435bf76c248387a21b2713873f0775d3c2c36cccab

    • SHA512

      a480952b4dc5a7228eae4bd9e8e2dd35a2f45da0aa1a44e48e2777c0d4d02c05583abed5d55d237bea5001fe08861f72b0a332365e196c76fa293b34c262ec68

    • SSDEEP

      12288:jabT0UdwF1Kx2AUckGFBsl8VUA27XPhaM2P5AdT4:WbgF1KEhckssGVrKhaM8AdT4

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks