General

  • Target

    ee23fdae6802720206b1b8430b857a84_JaffaCakes118

  • Size

    369KB

  • Sample

    240920-wmkgnszdqk

  • MD5

    ee23fdae6802720206b1b8430b857a84

  • SHA1

    cdc61c52b2d69d387319e782849cf65ecf445dfd

  • SHA256

    44ab279cb6c2eaea3884c5aaeedce936e9e3b5c718d498b90db7c54bf039d4ae

  • SHA512

    78a3387ee9f5658b6a90aeb105c964a349fc86d117d93307d95afcfe4cac243199aad5c1de4dfc648a18b93467946ab3058d2de92fa60849459eed6b12343dea

  • SSDEEP

    6144:CJSZ5Et2g03CuxbscdOb6B8wqKoH7NjxhRLEU3Z55JneKFzVzSDKRexupjaD/Ocx:5ZOtWv9sPwDoRBXpHZe0BZReIjYOqEK

Malware Config

Targets

    • Target

      ee23fdae6802720206b1b8430b857a84_JaffaCakes118

    • Size

      369KB

    • MD5

      ee23fdae6802720206b1b8430b857a84

    • SHA1

      cdc61c52b2d69d387319e782849cf65ecf445dfd

    • SHA256

      44ab279cb6c2eaea3884c5aaeedce936e9e3b5c718d498b90db7c54bf039d4ae

    • SHA512

      78a3387ee9f5658b6a90aeb105c964a349fc86d117d93307d95afcfe4cac243199aad5c1de4dfc648a18b93467946ab3058d2de92fa60849459eed6b12343dea

    • SSDEEP

      6144:CJSZ5Et2g03CuxbscdOb6B8wqKoH7NjxhRLEU3Z55JneKFzVzSDKRexupjaD/Ocx:5ZOtWv9sPwDoRBXpHZe0BZReIjYOqEK

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks