General

  • Target

    b5e91a4a80d1f1edc413edb6a9f2582d_JaffaCakes118

  • Size

    24KB

  • Sample

    241202-avh3xsvndk

  • MD5

    b5e91a4a80d1f1edc413edb6a9f2582d

  • SHA1

    16b84ff649eadf6b77e1f514360914a25247c3a0

  • SHA256

    0222cef05c94f0718699a62d75dfc4c22b5613118a2b7c5b7971d5c963f19c8d

  • SHA512

    59ceca2c73c9ca96b26387ddecfdeab8fa817406dff6338daafac5cd66e178c5fff7803cac87c4489e52dacb2976d2a7adb8de0ad7e9c3055cf6cabd7309706c

  • SSDEEP

    384:S3pJzu/RQ+mLyvXYu5+z0eicPiE6rmzKMrhY9RQeJN9pSJSC9KS:aupC2/kHPwr4sRV/SJB

Malware Config

Targets

    • Target

      b5e91a4a80d1f1edc413edb6a9f2582d_JaffaCakes118

    • Size

      24KB

    • MD5

      b5e91a4a80d1f1edc413edb6a9f2582d

    • SHA1

      16b84ff649eadf6b77e1f514360914a25247c3a0

    • SHA256

      0222cef05c94f0718699a62d75dfc4c22b5613118a2b7c5b7971d5c963f19c8d

    • SHA512

      59ceca2c73c9ca96b26387ddecfdeab8fa817406dff6338daafac5cd66e178c5fff7803cac87c4489e52dacb2976d2a7adb8de0ad7e9c3055cf6cabd7309706c

    • SSDEEP

      384:S3pJzu/RQ+mLyvXYu5+z0eicPiE6rmzKMrhY9RQeJN9pSJSC9KS:aupC2/kHPwr4sRV/SJB

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks