General

  • Target

    ed57c096b5603524d8bc95cf6fcc7bbb_JaffaCakes118

  • Size

    1.8MB

  • Sample

    240920-lxy3ps1bnq

  • MD5

    ed57c096b5603524d8bc95cf6fcc7bbb

  • SHA1

    e7d379170161668978cf67868d788ffa7f10d4b3

  • SHA256

    b3bc30eecb20c97c61c012c53aa82ed92045ece53e381ad1096bfa065070e30d

  • SHA512

    9d05d5766c364dbb7be3a82846ddb72c7fec5804001cef014174275cd25295773dfdd4e0627bceb956085509e0c60bbb88c47d495adea0b7cab64135d5ebafa3

  • SSDEEP

    49152:/h/lHiX8GfKvVRScM5k0ufjZnvfVngAqwfZ+:Zpq8GByXjNGA3

Malware Config

Targets

    • Target

      ed57c096b5603524d8bc95cf6fcc7bbb_JaffaCakes118

    • Size

      1.8MB

    • MD5

      ed57c096b5603524d8bc95cf6fcc7bbb

    • SHA1

      e7d379170161668978cf67868d788ffa7f10d4b3

    • SHA256

      b3bc30eecb20c97c61c012c53aa82ed92045ece53e381ad1096bfa065070e30d

    • SHA512

      9d05d5766c364dbb7be3a82846ddb72c7fec5804001cef014174275cd25295773dfdd4e0627bceb956085509e0c60bbb88c47d495adea0b7cab64135d5ebafa3

    • SSDEEP

      49152:/h/lHiX8GfKvVRScM5k0ufjZnvfVngAqwfZ+:Zpq8GByXjNGA3

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader First Stage

MITRE ATT&CK Enterprise v15

Tasks