General

  • Target

    eca56381aa675e8fce2438651bbd8ce1_JaffaCakes118

  • Size

    21KB

  • Sample

    240920-cqmxesvamr

  • MD5

    eca56381aa675e8fce2438651bbd8ce1

  • SHA1

    228f6919d09a8ec84ab481e7cf0a4c4a56d80a9e

  • SHA256

    1236b94ef4c4b43d43ea03e5ed9e4006f56d0bcaac90bc9a6288156f06a63cd8

  • SHA512

    9b306e458e60ee4295e7def57ea877d19956482ef21668bc3e4cfa9e00d2635e62a8871b8130ac2fd5b65eef4c89161f71a15f930dbdd7031ddfc2a9c4850e42

  • SSDEEP

    384:TjXZr1pk1ssMYJpK9CglCyJKgdYU/TjR5SVqzOKlfckPepxGvEBcqtLuni:TjXZr17pgYAgl9JnYUbjDSonlUkw3DtC

Malware Config

Targets

    • Target

      eca56381aa675e8fce2438651bbd8ce1_JaffaCakes118

    • Size

      21KB

    • MD5

      eca56381aa675e8fce2438651bbd8ce1

    • SHA1

      228f6919d09a8ec84ab481e7cf0a4c4a56d80a9e

    • SHA256

      1236b94ef4c4b43d43ea03e5ed9e4006f56d0bcaac90bc9a6288156f06a63cd8

    • SHA512

      9b306e458e60ee4295e7def57ea877d19956482ef21668bc3e4cfa9e00d2635e62a8871b8130ac2fd5b65eef4c89161f71a15f930dbdd7031ddfc2a9c4850e42

    • SSDEEP

      384:TjXZr1pk1ssMYJpK9CglCyJKgdYU/TjR5SVqzOKlfckPepxGvEBcqtLuni:TjXZr17pgYAgl9JnYUbjDSonlUkw3DtC

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks