General

  • Target

    f69418da1025a166fb16a9a4c09c10f4_JaffaCakes118

  • Size

    596KB

  • Sample

    240925-wsnraazbjn

  • MD5

    f69418da1025a166fb16a9a4c09c10f4

  • SHA1

    7d2e2c32ecbe84e0647aa51116b34dd49f487ae5

  • SHA256

    a9d0126c1a4e1445d387fcb867ccca4305ad8af32532db3eecdf1c4dba30b94e

  • SHA512

    c258556b8cc709ed1632196f232dd9cdbcd99a92c3e99740014149f77ce3523b45a064cd46ea7f780076345d99d463741472886fbb7e702c0f545d41f6ba310a

  • SSDEEP

    12288:zx0FzFNxTG9ppkAUzEF5qfXnF3Z4mxxtoEtlK+kt9T2MD:zx0P69+EuXnQmX+Gq

Malware Config

Targets

    • Target

      f69418da1025a166fb16a9a4c09c10f4_JaffaCakes118

    • Size

      596KB

    • MD5

      f69418da1025a166fb16a9a4c09c10f4

    • SHA1

      7d2e2c32ecbe84e0647aa51116b34dd49f487ae5

    • SHA256

      a9d0126c1a4e1445d387fcb867ccca4305ad8af32532db3eecdf1c4dba30b94e

    • SHA512

      c258556b8cc709ed1632196f232dd9cdbcd99a92c3e99740014149f77ce3523b45a064cd46ea7f780076345d99d463741472886fbb7e702c0f545d41f6ba310a

    • SSDEEP

      12288:zx0FzFNxTG9ppkAUzEF5qfXnF3Z4mxxtoEtlK+kt9T2MD:zx0P69+EuXnQmX+Gq

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks