General

  • Target

    bed77ed5f377485bda54efcc6be69c03_JaffaCakes118

  • Size

    428KB

  • Sample

    241203-xzacxavmhj

  • MD5

    bed77ed5f377485bda54efcc6be69c03

  • SHA1

    8509d6aa6f22e47f9d059d428504d9396b9d9de4

  • SHA256

    1830b03104e3540afb48a023716da62e540a77f370b39648b4bf1b5178397098

  • SHA512

    e2624c7f24edc95391fe0eb3bb73568011ea365d1abf8de776f1695c2cdd4b079b84e9c747683e0ebfe8606d65e0ff0d50511df23372784c0599cbaf63b2c57c

  • SSDEEP

    6144:trq/adF4j64iZaUvKB1IkRvrW5NgeYmi8cGFp8qLlpskKU17Bv++5JBhvNA8IerI:teadFRE1IkBI2YYvqLPL355NA8XbE

Malware Config

Targets

    • Target

      bed77ed5f377485bda54efcc6be69c03_JaffaCakes118

    • Size

      428KB

    • MD5

      bed77ed5f377485bda54efcc6be69c03

    • SHA1

      8509d6aa6f22e47f9d059d428504d9396b9d9de4

    • SHA256

      1830b03104e3540afb48a023716da62e540a77f370b39648b4bf1b5178397098

    • SHA512

      e2624c7f24edc95391fe0eb3bb73568011ea365d1abf8de776f1695c2cdd4b079b84e9c747683e0ebfe8606d65e0ff0d50511df23372784c0599cbaf63b2c57c

    • SSDEEP

      6144:trq/adF4j64iZaUvKB1IkRvrW5NgeYmi8cGFp8qLlpskKU17Bv++5JBhvNA8IerI:teadFRE1IkBI2YYvqLPL355NA8XbE

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks