General

  • Target

    bcbc26f767b5cfa00b9db761ecea3314_JaffaCakes118

  • Size

    28KB

  • Sample

    241203-lcv6bavkdl

  • MD5

    bcbc26f767b5cfa00b9db761ecea3314

  • SHA1

    c34ace4179b4374278e96045ad9b02ccc96f45ac

  • SHA256

    599ebde2d698c0db80fae6a1a80e4260996924ec9a1233f387dcd61587ed6bc0

  • SHA512

    84b931e278be14afe12a39f16b4df4cadd8304fc71fa8b56ecbe82dca5da15ee157ff303206cce3a3f0209fc00bca03d6b55c4b1789faa0c9ccb9a106addabaf

  • SSDEEP

    768:j+3PwFwreBECRGWOYh47b+4Nek/cSBX/8oDOiVGWyU:jmvrmGee7tek/Dk8

Malware Config

Targets

    • Target

      bcbc26f767b5cfa00b9db761ecea3314_JaffaCakes118

    • Size

      28KB

    • MD5

      bcbc26f767b5cfa00b9db761ecea3314

    • SHA1

      c34ace4179b4374278e96045ad9b02ccc96f45ac

    • SHA256

      599ebde2d698c0db80fae6a1a80e4260996924ec9a1233f387dcd61587ed6bc0

    • SHA512

      84b931e278be14afe12a39f16b4df4cadd8304fc71fa8b56ecbe82dca5da15ee157ff303206cce3a3f0209fc00bca03d6b55c4b1789faa0c9ccb9a106addabaf

    • SSDEEP

      768:j+3PwFwreBECRGWOYh47b+4Nek/cSBX/8oDOiVGWyU:jmvrmGee7tek/Dk8

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks