General

  • Target

    f70e5bbe31a3b953ba55fcb35ff454b1_JaffaCakes118

  • Size

    597KB

  • Sample

    240925-3bhbhawgmc

  • MD5

    f70e5bbe31a3b953ba55fcb35ff454b1

  • SHA1

    d34b37b91fbdb995e0507c7a461f690bd105015f

  • SHA256

    42a8b011ea909e76e91b70c0af554a0a06e1c3b7dfd5805d27b25e76dabd7aff

  • SHA512

    6e1bcc4601696743c88e4c150113284e81f1e561ed09edf4dc8b540750921bb063b7359ad91bfa788befda2cf475ff6cc12e6dda21ad93d04253b19e2826568f

  • SSDEEP

    12288:3M8FUr8wREWlM9Dvg+21c2obY7TsGsEbgO3yg:30rhRzM9DvWoc3sGbbgKyg

Malware Config

Targets

    • Target

      f70e5bbe31a3b953ba55fcb35ff454b1_JaffaCakes118

    • Size

      597KB

    • MD5

      f70e5bbe31a3b953ba55fcb35ff454b1

    • SHA1

      d34b37b91fbdb995e0507c7a461f690bd105015f

    • SHA256

      42a8b011ea909e76e91b70c0af554a0a06e1c3b7dfd5805d27b25e76dabd7aff

    • SHA512

      6e1bcc4601696743c88e4c150113284e81f1e561ed09edf4dc8b540750921bb063b7359ad91bfa788befda2cf475ff6cc12e6dda21ad93d04253b19e2826568f

    • SSDEEP

      12288:3M8FUr8wREWlM9Dvg+21c2obY7TsGsEbgO3yg:30rhRzM9DvWoc3sGbbgKyg

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks