General

  • Target

    fc376ec89b9b3c7d106e15de150102d9_JaffaCakes118

  • Size

    332KB

  • Sample

    240928-nplthstdrq

  • MD5

    fc376ec89b9b3c7d106e15de150102d9

  • SHA1

    fe868b4c6b364544891770e403df2d2f68a9ad27

  • SHA256

    579d7c273fbd100446da46d0d6b60a483edaa0eb2a5b116d17c211b08bb165db

  • SHA512

    8d74b1532fb8fdd1668bb7433bc7a38f88d2ac25b0af5f4cf8c8a30d79991c82a518d71dc96d211f11f09b2f31c9fd45f3d3ca856495398a5456bd95dd03253b

  • SSDEEP

    6144:9DfhqKtQvS++hvO9NFm7wdumU5jaOqpivQkkrbxVkmDLiVDQ5jY2jS0moe0:nBSS++hWzFmU8mU5jCivuPXPiKM2BhN

Malware Config

Targets

    • Target

      fc376ec89b9b3c7d106e15de150102d9_JaffaCakes118

    • Size

      332KB

    • MD5

      fc376ec89b9b3c7d106e15de150102d9

    • SHA1

      fe868b4c6b364544891770e403df2d2f68a9ad27

    • SHA256

      579d7c273fbd100446da46d0d6b60a483edaa0eb2a5b116d17c211b08bb165db

    • SHA512

      8d74b1532fb8fdd1668bb7433bc7a38f88d2ac25b0af5f4cf8c8a30d79991c82a518d71dc96d211f11f09b2f31c9fd45f3d3ca856495398a5456bd95dd03253b

    • SSDEEP

      6144:9DfhqKtQvS++hvO9NFm7wdumU5jaOqpivQkkrbxVkmDLiVDQ5jY2jS0moe0:nBSS++hWzFmU8mU5jCivuPXPiKM2BhN

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks