General

  • Target

    f3a48ab557ef75524c1244a53c5bf59c_JaffaCakes118

  • Size

    768KB

  • Sample

    240924-pn9dvsvdlr

  • MD5

    f3a48ab557ef75524c1244a53c5bf59c

  • SHA1

    cd0fb73fb7570445aa964b21152c1744c60378a1

  • SHA256

    5f098e1851afea85e4d227a0819dfdd6f2efaf70f3313b334bf65f7e8b10b9de

  • SHA512

    d76b2994b7988f3ee1c57aaa3ce11188c5107742b941ef428b34fcfb27819a488902e909a50b15e1d7af726639a0735be50128cfa4446019bde3e782920ddf6c

  • SSDEEP

    12288:RLvWAG0LBRfBjU0RFD8/vHNSHHByWs0GKQd:RrionfBD/A/vHNSHhvGKQ

Malware Config

Targets

    • Target

      f3a48ab557ef75524c1244a53c5bf59c_JaffaCakes118

    • Size

      768KB

    • MD5

      f3a48ab557ef75524c1244a53c5bf59c

    • SHA1

      cd0fb73fb7570445aa964b21152c1744c60378a1

    • SHA256

      5f098e1851afea85e4d227a0819dfdd6f2efaf70f3313b334bf65f7e8b10b9de

    • SHA512

      d76b2994b7988f3ee1c57aaa3ce11188c5107742b941ef428b34fcfb27819a488902e909a50b15e1d7af726639a0735be50128cfa4446019bde3e782920ddf6c

    • SSDEEP

      12288:RLvWAG0LBRfBjU0RFD8/vHNSHHByWs0GKQd:RrionfBD/A/vHNSHhvGKQ

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

MITRE ATT&CK Enterprise v15

Tasks