General

  • Target

    f308a72a717d473e193dd157eec6b737_JaffaCakes118

  • Size

    60KB

  • Sample

    240924-hc8jvsxgrb

  • MD5

    f308a72a717d473e193dd157eec6b737

  • SHA1

    b57ff5bb993002b7cce0f5eec30d9ff92eaa0806

  • SHA256

    89dad51cc879d6b0fbc015836e519183499c2d69a052fa87af7ae404a1208500

  • SHA512

    aa76bb64a43d7a68e6a58813afba2455be448763d1be11036360b1457b872fa8190514e89e1d678a65853889c8e73d073854fa94c1ddc3858e3724d1e60ce1b6

  • SSDEEP

    1536:Pbm7wjsVTJ+p3JrkGLawHE/E2j+Ei+Hj2aBzybXNEH8ocdV71u:I+sVT45mn/bjni8DBebXNA8ou71u

Malware Config

Targets

    • Target

      f308a72a717d473e193dd157eec6b737_JaffaCakes118

    • Size

      60KB

    • MD5

      f308a72a717d473e193dd157eec6b737

    • SHA1

      b57ff5bb993002b7cce0f5eec30d9ff92eaa0806

    • SHA256

      89dad51cc879d6b0fbc015836e519183499c2d69a052fa87af7ae404a1208500

    • SHA512

      aa76bb64a43d7a68e6a58813afba2455be448763d1be11036360b1457b872fa8190514e89e1d678a65853889c8e73d073854fa94c1ddc3858e3724d1e60ce1b6

    • SSDEEP

      1536:Pbm7wjsVTJ+p3JrkGLawHE/E2j+Ei+Hj2aBzybXNEH8ocdV71u:I+sVT45mn/bjni8DBebXNA8ou71u

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks