General

  • Target

    9eca2c0a538dae6f030557f5a41affe7_JaffaCakes118

  • Size

    395KB

  • Sample

    241126-asbwts1mdj

  • MD5

    9eca2c0a538dae6f030557f5a41affe7

  • SHA1

    d608466cdd130093616c1b5e1f2961a351a5fb24

  • SHA256

    6ddd19668a4bda88ebb9a34e225903b095c119f16119c80da3f3155750fd15ad

  • SHA512

    0a0deadb1ac71cabfe0b24d48677f9662361905dbe930787c37e755b01487b0253979a8ea7773998652c389a760af5bc1a54e4b7957a34b132ddc36ab67bba7d

  • SSDEEP

    12288:zF0szUUOc7Anp4Ph7BkdWE4+ifNaSUm8ivOidNSu:pIRZp4PkIza/ivFX

Malware Config

Targets

    • Target

      Purchase Order .exe

    • Size

      843KB

    • MD5

      df9bf53a23ae4b885524f9026975014a

    • SHA1

      ab2631398167651f4a00ccd17293ba383a91692a

    • SHA256

      0eb1525718c474773585ac792c3f5f3a646cb3be003a253a2e0363035e44adb7

    • SHA512

      96d44b7ea205ddf25e9dcf21f037b7906cd1de75266cc9c1066410c88f440d94bf17a82e1761909c2a17960c7a9d8521ec5e79ed04e377685b59fd7e93ab32dd

    • SSDEEP

      12288:Pk7JfNhjmkfdkN9ogGWRmYcGT8+275o2xaUGmj1a05q+KgTJ28BDGQPN+BRKa:mdXmkaN71RmYcN+MVxauj1fQn4cSP

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

MITRE ATT&CK Enterprise v15

Tasks