General

  • Target

    fdff7745bdfd6a5cf6962e09790c2d06_JaffaCakes118

  • Size

    442KB

  • Sample

    240929-hmfa3awerd

  • MD5

    fdff7745bdfd6a5cf6962e09790c2d06

  • SHA1

    3641c4c8fa9bddfcf60ed8e67bf84dbf8131ec85

  • SHA256

    e0a5ba0713d9e54a2bebae7d454a8031e04654a0e89e7e2f593a684c0df6fa82

  • SHA512

    e67b1bfb5536ef2e3d0e94ae9f5b7da3899c4675b314d375079df7ca93a765de97d62b9479c2f7df2f5edd812304be4a99adf33650fa31ad027b3ce9dac3fe46

  • SSDEEP

    12288:ioacDYFDbEVH7+FBCVVS8w6nev7KkuHoS:liRAH7+glev7Tu

Malware Config

Targets

    • Target

      fdff7745bdfd6a5cf6962e09790c2d06_JaffaCakes118

    • Size

      442KB

    • MD5

      fdff7745bdfd6a5cf6962e09790c2d06

    • SHA1

      3641c4c8fa9bddfcf60ed8e67bf84dbf8131ec85

    • SHA256

      e0a5ba0713d9e54a2bebae7d454a8031e04654a0e89e7e2f593a684c0df6fa82

    • SHA512

      e67b1bfb5536ef2e3d0e94ae9f5b7da3899c4675b314d375079df7ca93a765de97d62b9479c2f7df2f5edd812304be4a99adf33650fa31ad027b3ce9dac3fe46

    • SSDEEP

      12288:ioacDYFDbEVH7+FBCVVS8w6nev7KkuHoS:liRAH7+glev7Tu

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks