General

  • Target

    04351af7500e08cfd879936b3e35f8ef_JaffaCakes118

  • Size

    748KB

  • Sample

    241001-d11fyasekb

  • MD5

    04351af7500e08cfd879936b3e35f8ef

  • SHA1

    c7c5790c0b06cda8552adfa79b213fcb0eb5ca9c

  • SHA256

    71fda8754f1a28bb4aaa9e21f0ac4821ebe7beb7699b6f9527b575573c96e036

  • SHA512

    78181f0e2b136543192ff12eb303c3e154fe15c2e7e5918971781f58889c8761e5bdd8caddadfcef37a839597019c871e1cc0e0e0be843c519c0d1f114c062dd

  • SSDEEP

    12288:NOmSDLYLhASuo7pUeqqrMhGJShUZMBGk5LeBCcrIwdAe73m4LmTh06jxUi7:NtaUA+77qqQgShlGk5LenIw9mOmTh09K

Malware Config

Targets

    • Target

      04351af7500e08cfd879936b3e35f8ef_JaffaCakes118

    • Size

      748KB

    • MD5

      04351af7500e08cfd879936b3e35f8ef

    • SHA1

      c7c5790c0b06cda8552adfa79b213fcb0eb5ca9c

    • SHA256

      71fda8754f1a28bb4aaa9e21f0ac4821ebe7beb7699b6f9527b575573c96e036

    • SHA512

      78181f0e2b136543192ff12eb303c3e154fe15c2e7e5918971781f58889c8761e5bdd8caddadfcef37a839597019c871e1cc0e0e0be843c519c0d1f114c062dd

    • SSDEEP

      12288:NOmSDLYLhASuo7pUeqqrMhGJShUZMBGk5LeBCcrIwdAe73m4LmTh06jxUi7:NtaUA+77qqQgShlGk5LenIw9mOmTh09K

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader First Stage

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks