General

  • Target

    f44c128e55f054f7aa192c8241fd238f_JaffaCakes118

  • Size

    375KB

  • Sample

    240924-xklgmasfmc

  • MD5

    f44c128e55f054f7aa192c8241fd238f

  • SHA1

    0515ad4eccf2e2d9a4ecc54abbae6b8eabe3db75

  • SHA256

    de796c082eaa05cf706a800fa07e0b3773bc93b0619a68e8f58bfcf828581099

  • SHA512

    4f41858db5d559f44e65d47e998d65beb74ff037e9d3b75fc298d1074421368b7a0155e9e168084ceae37e9894967bd78a6bbd20a0743369a2e4a5dbe8321701

  • SSDEEP

    6144:Ro2Xd+X7IS43sgR7iZ0Hl5mU7FoMb3K423OS2Is+kqsCnpFc3Zl3JecDSP85zJYq:Ro2XMrI3s2Ok9JoMDt2eIsNqsCnTYZ3J

Malware Config

Targets

    • Target

      f44c128e55f054f7aa192c8241fd238f_JaffaCakes118

    • Size

      375KB

    • MD5

      f44c128e55f054f7aa192c8241fd238f

    • SHA1

      0515ad4eccf2e2d9a4ecc54abbae6b8eabe3db75

    • SHA256

      de796c082eaa05cf706a800fa07e0b3773bc93b0619a68e8f58bfcf828581099

    • SHA512

      4f41858db5d559f44e65d47e998d65beb74ff037e9d3b75fc298d1074421368b7a0155e9e168084ceae37e9894967bd78a6bbd20a0743369a2e4a5dbe8321701

    • SSDEEP

      6144:Ro2Xd+X7IS43sgR7iZ0Hl5mU7FoMb3K423OS2Is+kqsCnpFc3Zl3JecDSP85zJYq:Ro2XMrI3s2Ok9JoMDt2eIsNqsCnTYZ3J

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks