General

  • Target

    98e92f161901ddde28e717fa190404bd_JaffaCakes118

  • Size

    460KB

  • Sample

    241125-dxvraa1rak

  • MD5

    98e92f161901ddde28e717fa190404bd

  • SHA1

    19107505de1cda0687296aef4725d6ee6218179f

  • SHA256

    062403ab7fbd50e7ea84800daeb0b297c650f15a5cb702319d9819aff5782b62

  • SHA512

    0e1f4608f96e37cc91959746282a431529086ac42536a2af2a97dcf80690de5faa0dc9559c5ceea615971274d0171719af674ba6472abd0cffd6a3fa76e2d8b5

  • SSDEEP

    12288:PT5W33VQN4lLgGvjVt3bYB7oSVn+r5o0yEeNoE:8DlLXjV2BEKn+2Nj

Malware Config

Targets

    • Target

      98e92f161901ddde28e717fa190404bd_JaffaCakes118

    • Size

      460KB

    • MD5

      98e92f161901ddde28e717fa190404bd

    • SHA1

      19107505de1cda0687296aef4725d6ee6218179f

    • SHA256

      062403ab7fbd50e7ea84800daeb0b297c650f15a5cb702319d9819aff5782b62

    • SHA512

      0e1f4608f96e37cc91959746282a431529086ac42536a2af2a97dcf80690de5faa0dc9559c5ceea615971274d0171719af674ba6472abd0cffd6a3fa76e2d8b5

    • SSDEEP

      12288:PT5W33VQN4lLgGvjVt3bYB7oSVn+r5o0yEeNoE:8DlLXjV2BEKn+2Nj

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks