General

  • Target

    fb5b6ebb519b8bded191465d86857832_JaffaCakes118

  • Size

    641KB

  • Sample

    240928-da345swalh

  • MD5

    fb5b6ebb519b8bded191465d86857832

  • SHA1

    83ddfd087f4c424d63d67765caca21cf0eb7d0e1

  • SHA256

    55baedb6ab7a09aed7ec88002770e1bf55c3bea3bd9c001944821742f015d2e4

  • SHA512

    60971d62818f138ec2517e548849430a6d406a5369b1dc9b8221a7976a61a16804f00114534b4b04dd941e9884ec4a8cacf0c20e691d589639f8f43ef763e976

  • SSDEEP

    12288:vt1RoiM5uZ3Z0JR2OGoXZiylyq4c5jYIfJGfF3Z4mxxN0MHoTAFbcm:F1PMs5OR2OGQQGJYQmXNK7m

Malware Config

Targets

    • Target

      fb5b6ebb519b8bded191465d86857832_JaffaCakes118

    • Size

      641KB

    • MD5

      fb5b6ebb519b8bded191465d86857832

    • SHA1

      83ddfd087f4c424d63d67765caca21cf0eb7d0e1

    • SHA256

      55baedb6ab7a09aed7ec88002770e1bf55c3bea3bd9c001944821742f015d2e4

    • SHA512

      60971d62818f138ec2517e548849430a6d406a5369b1dc9b8221a7976a61a16804f00114534b4b04dd941e9884ec4a8cacf0c20e691d589639f8f43ef763e976

    • SSDEEP

      12288:vt1RoiM5uZ3Z0JR2OGoXZiylyq4c5jYIfJGfF3Z4mxxN0MHoTAFbcm:F1PMs5OR2OGQQGJYQmXNK7m

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks