General

  • Target

    0103153995e2e7d2cdbfc9e89cef3ba3_JaffaCakes118

  • Size

    728KB

  • Sample

    240930-m972tawfke

  • MD5

    0103153995e2e7d2cdbfc9e89cef3ba3

  • SHA1

    484a247298850c4f8e479cdb3b543fa008a1fef1

  • SHA256

    d43971c57a1117c2dd95b79e3a142fd344567e9767907e78792a204667fc7a2e

  • SHA512

    ec52153be34d8ceeee0e67050bca94683069d03dd2fc9392c94881d2700b39c0be9047cae916055d428652ba32eef414281f3f2cdbbad02cc8171bc0709d3fb0

  • SSDEEP

    12288:h3giVY3n+EOsJFVp8xnSVx5arkFL69fPf9LY0QRvMD9vu7H+jOKxBnHM6NR399CW:dVW+ovj8xSVx5arkt69fX9ERRkRfjbz7

Malware Config

Targets

    • Target

      0103153995e2e7d2cdbfc9e89cef3ba3_JaffaCakes118

    • Size

      728KB

    • MD5

      0103153995e2e7d2cdbfc9e89cef3ba3

    • SHA1

      484a247298850c4f8e479cdb3b543fa008a1fef1

    • SHA256

      d43971c57a1117c2dd95b79e3a142fd344567e9767907e78792a204667fc7a2e

    • SHA512

      ec52153be34d8ceeee0e67050bca94683069d03dd2fc9392c94881d2700b39c0be9047cae916055d428652ba32eef414281f3f2cdbbad02cc8171bc0709d3fb0

    • SSDEEP

      12288:h3giVY3n+EOsJFVp8xnSVx5arkFL69fPf9LY0QRvMD9vu7H+jOKxBnHM6NR399CW:dVW+ovj8xSVx5arkt69fX9ERRkRfjbz7

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks