General

  • Target

    fd2270f256e487a86197ee920d974227_JaffaCakes118

  • Size

    57KB

  • Sample

    240928-zsv25swcpr

  • MD5

    fd2270f256e487a86197ee920d974227

  • SHA1

    f945bcf954a5db6256e8c0012b92261f2d566125

  • SHA256

    a6c5c43c44607de2135ed6d67c8a639e29c2c4fe0ec1fe81a7c1fbd98fd2090d

  • SHA512

    96da12f707363b0d80dcc0e1390ec9d84f26628623963d95dd9a12e42c5f2a045deca5a4cce7d856cf6c5157550a53130850087308a1ac2fec970f8bfc413b56

  • SSDEEP

    1536:48aZCf1I4dd3RXtissyNw/VKq9w4GTkt560Up9cpIS:nSk35tiaCL33Acp

Malware Config

Targets

    • Target

      fd2270f256e487a86197ee920d974227_JaffaCakes118

    • Size

      57KB

    • MD5

      fd2270f256e487a86197ee920d974227

    • SHA1

      f945bcf954a5db6256e8c0012b92261f2d566125

    • SHA256

      a6c5c43c44607de2135ed6d67c8a639e29c2c4fe0ec1fe81a7c1fbd98fd2090d

    • SHA512

      96da12f707363b0d80dcc0e1390ec9d84f26628623963d95dd9a12e42c5f2a045deca5a4cce7d856cf6c5157550a53130850087308a1ac2fec970f8bfc413b56

    • SSDEEP

      1536:48aZCf1I4dd3RXtissyNw/VKq9w4GTkt560Up9cpIS:nSk35tiaCL33Acp

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks