General

  • Target

    024745a24560700e48a396676e4d29f2_JaffaCakes118

  • Size

    146KB

  • Sample

    240930-txz9rsyfla

  • MD5

    024745a24560700e48a396676e4d29f2

  • SHA1

    947ab3950f2069648800835e9d88bd95b54c713f

  • SHA256

    f4b52b955ab4574f08d7fdbcca8a08dfdad62bdf5fc993c8db442bdb0198191d

  • SHA512

    4c695549502314e730a6deb345d0bbf9dff47ef5c4925b589f1db4841c1fce746de4f1fa5259c4e8b81b10fef0989a30c925204cd2d6dd58be3cb98d0e9cb18e

  • SSDEEP

    3072:amvG9swA4bcAeDofRDbkeOQBqFOk5EIDXiArs8+Jm4rQ8oRM539:asvNbAdB+Oklv3af

Malware Config

Targets

    • Target

      024745a24560700e48a396676e4d29f2_JaffaCakes118

    • Size

      146KB

    • MD5

      024745a24560700e48a396676e4d29f2

    • SHA1

      947ab3950f2069648800835e9d88bd95b54c713f

    • SHA256

      f4b52b955ab4574f08d7fdbcca8a08dfdad62bdf5fc993c8db442bdb0198191d

    • SHA512

      4c695549502314e730a6deb345d0bbf9dff47ef5c4925b589f1db4841c1fce746de4f1fa5259c4e8b81b10fef0989a30c925204cd2d6dd58be3cb98d0e9cb18e

    • SSDEEP

      3072:amvG9swA4bcAeDofRDbkeOQBqFOk5EIDXiArs8+Jm4rQ8oRM539:asvNbAdB+Oklv3af

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks