General

  • Target

    f72f033a3208468163b0027021e033ed_JaffaCakes118

  • Size

    324KB

  • Sample

    240926-a14a2szeqf

  • MD5

    f72f033a3208468163b0027021e033ed

  • SHA1

    eb33786f17a51f4eb01c208773646a5eebdd5d0d

  • SHA256

    6c731406029f003a81429d09807d2cb423190ee5deac497b462b64858ceb458b

  • SHA512

    d5c9e5418d83bba4e5795310fe25d0c4e1d4f9dd764169526e738b3341dacfe8c4eb638bdb8e3f2207c2ce6c6030e90a5f667fc57400982daeac9f3372276263

  • SSDEEP

    6144:TGTNaaNq/Q9iYyv+UPV5t0QM1YMA5YWp0cwqZdemledYdhbdWrdGOMNwW/QA0:TGT5Nqoq3tbq+mcHdeml2YdZdpQW4A0

Malware Config

Targets

    • Target

      f72f033a3208468163b0027021e033ed_JaffaCakes118

    • Size

      324KB

    • MD5

      f72f033a3208468163b0027021e033ed

    • SHA1

      eb33786f17a51f4eb01c208773646a5eebdd5d0d

    • SHA256

      6c731406029f003a81429d09807d2cb423190ee5deac497b462b64858ceb458b

    • SHA512

      d5c9e5418d83bba4e5795310fe25d0c4e1d4f9dd764169526e738b3341dacfe8c4eb638bdb8e3f2207c2ce6c6030e90a5f667fc57400982daeac9f3372276263

    • SSDEEP

      6144:TGTNaaNq/Q9iYyv+UPV5t0QM1YMA5YWp0cwqZdemledYdhbdWrdGOMNwW/QA0:TGT5Nqoq3tbq+mcHdeml2YdZdpQW4A0

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Deletes itself

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.