General

  • Target

    f3ae63a1bc8461811a915b348f385aa0_JaffaCakes118

  • Size

    309KB

  • Sample

    240924-p4d8navhml

  • MD5

    f3ae63a1bc8461811a915b348f385aa0

  • SHA1

    ae47fe79cdfc399e39b622e43ea7d5a8f01b09a5

  • SHA256

    d83081f9c14fdd37e857c5db697e1d4992d5b145e91cce74d2f1ee21e77479d5

  • SHA512

    1a009feb6d169fc1e7c159175188fcb1e55229418422afc286b63de679075e9bd6340266a524fd6e942041a8e78a6aa3afe32e0f43ac728f13d441b47ccc4354

  • SSDEEP

    6144:qRg3nhKJXhOxa5kQF1AerHh8sT83p6FcHtrFHjtycNrKFfMOGjBXrkstRS0yb:qmXhKzOxaWQF1A4B8n3pgEtxLrwf8jBG

Malware Config

Targets

    • Target

      f3ae63a1bc8461811a915b348f385aa0_JaffaCakes118

    • Size

      309KB

    • MD5

      f3ae63a1bc8461811a915b348f385aa0

    • SHA1

      ae47fe79cdfc399e39b622e43ea7d5a8f01b09a5

    • SHA256

      d83081f9c14fdd37e857c5db697e1d4992d5b145e91cce74d2f1ee21e77479d5

    • SHA512

      1a009feb6d169fc1e7c159175188fcb1e55229418422afc286b63de679075e9bd6340266a524fd6e942041a8e78a6aa3afe32e0f43ac728f13d441b47ccc4354

    • SSDEEP

      6144:qRg3nhKJXhOxa5kQF1AerHh8sT83p6FcHtrFHjtycNrKFfMOGjBXrkstRS0yb:qmXhKzOxaWQF1A4B8n3pgEtxLrwf8jBG

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks