General

  • Target

    b1391835d25d86a5b8c4ea6781296022_JaffaCakes118

  • Size

    624KB

  • Sample

    241129-plkygszmcl

  • MD5

    b1391835d25d86a5b8c4ea6781296022

  • SHA1

    a30a692219a14f1aea9e627178b56172a072d3e3

  • SHA256

    a5236794ba4fbbd70e99fd575b821723a1a7f5af5e5cc7d5e80f934fdad375de

  • SHA512

    e6d45c4569a97d3d2bcf31832ed593c014b6f33ceb714e629088ca4548adf78fc708ccc52e8e57e4764655e4d439e95d0a5fa40bc5348144044a12f22e2dcaa7

  • SSDEEP

    12288:utzjtzCjD840Mk18b68J4L8qXtF3Z4mxxh0MHoTAFbpH1:WRz684Z3682LftQmXhKIH1

Malware Config

Targets

    • Target

      b1391835d25d86a5b8c4ea6781296022_JaffaCakes118

    • Size

      624KB

    • MD5

      b1391835d25d86a5b8c4ea6781296022

    • SHA1

      a30a692219a14f1aea9e627178b56172a072d3e3

    • SHA256

      a5236794ba4fbbd70e99fd575b821723a1a7f5af5e5cc7d5e80f934fdad375de

    • SHA512

      e6d45c4569a97d3d2bcf31832ed593c014b6f33ceb714e629088ca4548adf78fc708ccc52e8e57e4764655e4d439e95d0a5fa40bc5348144044a12f22e2dcaa7

    • SSDEEP

      12288:utzjtzCjD840Mk18b68J4L8qXtF3Z4mxxh0MHoTAFbpH1:WRz684Z3682LftQmXhKIH1

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks