General

  • Target

    c218c5652cd111045f423521cc70ec4b_JaffaCakes118

  • Size

    689KB

  • Sample

    241204-mdt53sxphm

  • MD5

    c218c5652cd111045f423521cc70ec4b

  • SHA1

    c2a202ad89ae4d899a67ce54492f3c0328d96310

  • SHA256

    11c3716ff2e5f4f1e05f44578a893ca2f2d3856cca72cc0051c16f0c92abdeae

  • SHA512

    57232dc35a17ed816686906b531d7cfcd672164a0668af9f4cd06c89362dc406b807a8e7a74bdf70761e7175268bbfe7f11df9c9aed5956fa74543471cc9540f

  • SSDEEP

    12288:Kugl095nSxHxzsFb+4pbzsUn7XFLvEoqezYRoKLTK8:hy0XSxH9so4pHZRTNc7LT3

Malware Config

Targets

    • Target

      c218c5652cd111045f423521cc70ec4b_JaffaCakes118

    • Size

      689KB

    • MD5

      c218c5652cd111045f423521cc70ec4b

    • SHA1

      c2a202ad89ae4d899a67ce54492f3c0328d96310

    • SHA256

      11c3716ff2e5f4f1e05f44578a893ca2f2d3856cca72cc0051c16f0c92abdeae

    • SHA512

      57232dc35a17ed816686906b531d7cfcd672164a0668af9f4cd06c89362dc406b807a8e7a74bdf70761e7175268bbfe7f11df9c9aed5956fa74543471cc9540f

    • SSDEEP

      12288:Kugl095nSxHxzsFb+4pbzsUn7XFLvEoqezYRoKLTK8:hy0XSxH9so4pHZRTNc7LT3

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks