General

  • Target

    ec915d1633b2e2e03759fb0186597219_JaffaCakes118

  • Size

    216KB

  • Sample

    240920-bth7zascmj

  • MD5

    ec915d1633b2e2e03759fb0186597219

  • SHA1

    754bae3b2c79233a1ebf60f3bc8e58f641ae9590

  • SHA256

    9088b50009559b0862fe45c39f6686b3f3f84133ce2f8bec7165957eb270be5f

  • SHA512

    ab38e1c48d4af07c7a7e1679257286c9131cbfa52fb1653bf0cf2ce7db37dc1888a33f6d224089de94b42c5577e3118096f86618c9c69f2512d349a182d751a5

  • SSDEEP

    6144:EQaTpvBwDdO/tRmYRcNm9ashRC3jaTcRkIWOcMn:kNmD8fmqBjhRC3OeXb

Malware Config

Targets

    • Target

      ec915d1633b2e2e03759fb0186597219_JaffaCakes118

    • Size

      216KB

    • MD5

      ec915d1633b2e2e03759fb0186597219

    • SHA1

      754bae3b2c79233a1ebf60f3bc8e58f641ae9590

    • SHA256

      9088b50009559b0862fe45c39f6686b3f3f84133ce2f8bec7165957eb270be5f

    • SHA512

      ab38e1c48d4af07c7a7e1679257286c9131cbfa52fb1653bf0cf2ce7db37dc1888a33f6d224089de94b42c5577e3118096f86618c9c69f2512d349a182d751a5

    • SSDEEP

      6144:EQaTpvBwDdO/tRmYRcNm9ashRC3jaTcRkIWOcMn:kNmD8fmqBjhRC3OeXb

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks