General

  • Target

    ffaa3ff8775958b2c315dac80e35f04b_JaffaCakes118

  • Size

    24KB

  • Sample

    240930-bn55jsvaqg

  • MD5

    ffaa3ff8775958b2c315dac80e35f04b

  • SHA1

    cfc4a26c841951b98fd00cd4a56f12534ea7a172

  • SHA256

    32d887b889029ba6536a71d8a45059fab06af4be1264f1e6d4e798a230d0a0b0

  • SHA512

    d7e9df1e51a000ea2cd78532e9796a69a16c7fbe4514c745fa01bf1414b3afbd404868a342c78196f06baad9ddc790d0c4e2ba1a7812bd832892b392ada07d98

  • SSDEEP

    384:EbKj7Wmqzu/RQ+mLyvXYu5+z0n+HFFxeomj6WmeEOSif8AdL1Igwrsrp7WLgb2:Fjh+upC2/k1HFFxeomjNmofP8kO

Malware Config

Targets

    • Target

      ffaa3ff8775958b2c315dac80e35f04b_JaffaCakes118

    • Size

      24KB

    • MD5

      ffaa3ff8775958b2c315dac80e35f04b

    • SHA1

      cfc4a26c841951b98fd00cd4a56f12534ea7a172

    • SHA256

      32d887b889029ba6536a71d8a45059fab06af4be1264f1e6d4e798a230d0a0b0

    • SHA512

      d7e9df1e51a000ea2cd78532e9796a69a16c7fbe4514c745fa01bf1414b3afbd404868a342c78196f06baad9ddc790d0c4e2ba1a7812bd832892b392ada07d98

    • SSDEEP

      384:EbKj7Wmqzu/RQ+mLyvXYu5+z0n+HFFxeomj6WmeEOSif8AdL1Igwrsrp7WLgb2:Fjh+upC2/k1HFFxeomjNmofP8kO

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks