General

  • Target

    f9e973cab411e4dac0345874a8e68c63_JaffaCakes118

  • Size

    248KB

  • Sample

    240927-hegh6asfph

  • MD5

    f9e973cab411e4dac0345874a8e68c63

  • SHA1

    bfc9108d7960cacf41b44a8223b363991bb115e9

  • SHA256

    0deeb19703113ccfd796345bc799ea7f98a59c014ad77ed52678ed837662ab72

  • SHA512

    87ab71eb0335e6806d238172c91fba62fab28db9607d3ed85478262c92d54ac7b5906f0df7346a50ea29748d4ee0950fbc634c4d839e0f5c1ae5d206893f9137

  • SSDEEP

    6144:WEjOdnS4E31lLRJARqiR+SKSim4414QXR:WuOdnSR1xER+YiQT

Malware Config

Targets

    • Target

      f9e973cab411e4dac0345874a8e68c63_JaffaCakes118

    • Size

      248KB

    • MD5

      f9e973cab411e4dac0345874a8e68c63

    • SHA1

      bfc9108d7960cacf41b44a8223b363991bb115e9

    • SHA256

      0deeb19703113ccfd796345bc799ea7f98a59c014ad77ed52678ed837662ab72

    • SHA512

      87ab71eb0335e6806d238172c91fba62fab28db9607d3ed85478262c92d54ac7b5906f0df7346a50ea29748d4ee0950fbc634c4d839e0f5c1ae5d206893f9137

    • SSDEEP

      6144:WEjOdnS4E31lLRJARqiR+SKSim4414QXR:WuOdnSR1xER+YiQT

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

MITRE ATT&CK Enterprise v15

Tasks