General

  • Target

    a013baa17fb2cf0f410601effb5d07ae_JaffaCakes118

  • Size

    596KB

  • Sample

    241126-f6pbzawrcx

  • MD5

    a013baa17fb2cf0f410601effb5d07ae

  • SHA1

    f4bfdb7620dad16548251b7f977dbe6b45bc027a

  • SHA256

    8237f12e2439be6c2504817922861ca86d62c5fdf8665e8c1917c79005bfe02b

  • SHA512

    ddc6b04f0bc591a01388a7f44b1165ce5fb9cc6bc79e2a6248d9f2ceb4cc61754c2b7768c790332f48bce055f9defe9a001d153514ec81f266a93ba51dc93c1b

  • SSDEEP

    12288:IJttHVvuVriz+K1qLaIDLDZS2CwEcUz39r:wxHwLaGXZ6IO39

Malware Config

Targets

    • Target

      a013baa17fb2cf0f410601effb5d07ae_JaffaCakes118

    • Size

      596KB

    • MD5

      a013baa17fb2cf0f410601effb5d07ae

    • SHA1

      f4bfdb7620dad16548251b7f977dbe6b45bc027a

    • SHA256

      8237f12e2439be6c2504817922861ca86d62c5fdf8665e8c1917c79005bfe02b

    • SHA512

      ddc6b04f0bc591a01388a7f44b1165ce5fb9cc6bc79e2a6248d9f2ceb4cc61754c2b7768c790332f48bce055f9defe9a001d153514ec81f266a93ba51dc93c1b

    • SSDEEP

      12288:IJttHVvuVriz+K1qLaIDLDZS2CwEcUz39r:wxHwLaGXZ6IO39

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks