General

  • Target

    efa5b0575b9c8fc9339da0fe58ebdbe2_JaffaCakes118

  • Size

    666KB

  • Sample

    240921-m3mgjaydnf

  • MD5

    efa5b0575b9c8fc9339da0fe58ebdbe2

  • SHA1

    588c8d589f0bfe066228dfff86309a4d20f98c20

  • SHA256

    e3b3288b79acdef8a6aae3a14827e7598e99ed2cd36bb79dd427775fca76d562

  • SHA512

    c09a67440875b5cd7275c94d5bf3d585f7473407923c5baaa2778dc508c97edf16a6526c1956886fd3b58c8936d56a87f85a527cd35e8c6a67aea4c591c65b3e

  • SSDEEP

    12288:LMUNmhVaz4oU+OKxUwg/oMSDVnnEKYdGSSzoAF3Z4mxxGJ9oZHMdoJGtQDWYf:IUNmnaz4hKqJQMKnExcoAQmXrpM2JMIB

Malware Config

Targets

    • Target

      efa5b0575b9c8fc9339da0fe58ebdbe2_JaffaCakes118

    • Size

      666KB

    • MD5

      efa5b0575b9c8fc9339da0fe58ebdbe2

    • SHA1

      588c8d589f0bfe066228dfff86309a4d20f98c20

    • SHA256

      e3b3288b79acdef8a6aae3a14827e7598e99ed2cd36bb79dd427775fca76d562

    • SHA512

      c09a67440875b5cd7275c94d5bf3d585f7473407923c5baaa2778dc508c97edf16a6526c1956886fd3b58c8936d56a87f85a527cd35e8c6a67aea4c591c65b3e

    • SSDEEP

      12288:LMUNmhVaz4oU+OKxUwg/oMSDVnnEKYdGSSzoAF3Z4mxxGJ9oZHMdoJGtQDWYf:IUNmnaz4hKqJQMKnExcoAQmXrpM2JMIB

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks