General

  • Target

    f702a220baa9e63faecaf918d107585a_JaffaCakes118

  • Size

    108KB

  • Sample

    240925-2r8mysvgng

  • MD5

    f702a220baa9e63faecaf918d107585a

  • SHA1

    b5a40712c417e50f52ae03214714ebc8d294cafe

  • SHA256

    bc4d8b347a155e1266689b377adfb72d927afaf68b8832dd8921ed4ccfb2f233

  • SHA512

    bd189f2e6a2d582a029ca8cfc753861bea23c1dcfaad01395ab4692b27858f5e92e0a5c908203f0e9579ca6f64e9cd75d42b55adc19959e9ae11191fe9017aad

  • SSDEEP

    3072:7oy8j7VnNdrPnaSekwi+mW+2Bp5cP/Aout:78jZ7rPaU3+mWrDpoS

Malware Config

Targets

    • Target

      f702a220baa9e63faecaf918d107585a_JaffaCakes118

    • Size

      108KB

    • MD5

      f702a220baa9e63faecaf918d107585a

    • SHA1

      b5a40712c417e50f52ae03214714ebc8d294cafe

    • SHA256

      bc4d8b347a155e1266689b377adfb72d927afaf68b8832dd8921ed4ccfb2f233

    • SHA512

      bd189f2e6a2d582a029ca8cfc753861bea23c1dcfaad01395ab4692b27858f5e92e0a5c908203f0e9579ca6f64e9cd75d42b55adc19959e9ae11191fe9017aad

    • SSDEEP

      3072:7oy8j7VnNdrPnaSekwi+mW+2Bp5cP/Aout:78jZ7rPaU3+mWrDpoS

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks