General

  • Target

    936b9caaa262256921676628da76d824_JaffaCakes118

  • Size

    4.1MB

  • Sample

    241124-js5cta1ldv

  • MD5

    936b9caaa262256921676628da76d824

  • SHA1

    b6b89cecb63c4e6936f2be6b2c06d81ef73ad6ee

  • SHA256

    52f2b5fd1179339f87cf7d33db5fe3c790767abf1834e1e15f333ebc36fc5ed5

  • SHA512

    ae1d0cd24f2b85d6f8aab349be8864fbe69d8b7661817c6c24e9f39a0b8db77c264effb4eb28814ea89f38938e65e528f3106deda2ed725f1bab5a2f283f487c

  • SSDEEP

    98304:m0lCf3nlHjDo7LjDo7viNRAHhpeaNRAHLlKEUR1bk3ZIF:m0lCNHjDo7LjDo7viNRAHhpjNRAHBw1J

Malware Config

Targets

    • Target

      936b9caaa262256921676628da76d824_JaffaCakes118

    • Size

      4.1MB

    • MD5

      936b9caaa262256921676628da76d824

    • SHA1

      b6b89cecb63c4e6936f2be6b2c06d81ef73ad6ee

    • SHA256

      52f2b5fd1179339f87cf7d33db5fe3c790767abf1834e1e15f333ebc36fc5ed5

    • SHA512

      ae1d0cd24f2b85d6f8aab349be8864fbe69d8b7661817c6c24e9f39a0b8db77c264effb4eb28814ea89f38938e65e528f3106deda2ed725f1bab5a2f283f487c

    • SSDEEP

      98304:m0lCf3nlHjDo7LjDo7viNRAHhpeaNRAHLlKEUR1bk3ZIF:m0lCNHjDo7LjDo7viNRAHhpjNRAHBw1J

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks