General

  • Target

    a278534dec5ffef45eb9244b95b5c1e8_JaffaCakes118

  • Size

    111KB

  • Sample

    241126-rytr9svpes

  • MD5

    a278534dec5ffef45eb9244b95b5c1e8

  • SHA1

    46e452727f9b120714a921719e90eec85d7354f8

  • SHA256

    d35f8c3feed8472f3cc97faaf0a4b4ed491bdc87c3c1e0e29b0440dc5061fbce

  • SHA512

    31241885105f2c966a8876bc4dea59c6949b3a3ae21cc297e73de7826b174b069ae546d778d794bbc7bf5bb291227f0af7b57c687b6731af0504b5b40cf91ae4

  • SSDEEP

    3072:91+MJKrUnFYY5z1i0Nmbi5fJBNPhkout:LYrPj0NmWtNyoS

Malware Config

Targets

    • Target

      a278534dec5ffef45eb9244b95b5c1e8_JaffaCakes118

    • Size

      111KB

    • MD5

      a278534dec5ffef45eb9244b95b5c1e8

    • SHA1

      46e452727f9b120714a921719e90eec85d7354f8

    • SHA256

      d35f8c3feed8472f3cc97faaf0a4b4ed491bdc87c3c1e0e29b0440dc5061fbce

    • SHA512

      31241885105f2c966a8876bc4dea59c6949b3a3ae21cc297e73de7826b174b069ae546d778d794bbc7bf5bb291227f0af7b57c687b6731af0504b5b40cf91ae4

    • SSDEEP

      3072:91+MJKrUnFYY5z1i0Nmbi5fJBNPhkout:LYrPj0NmWtNyoS

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks