General

  • Target

    d35f9f8e54da16c7be90006be195140d_JaffaCakes118

  • Size

    35KB

  • Sample

    241207-yrywzawmfj

  • MD5

    d35f9f8e54da16c7be90006be195140d

  • SHA1

    7ae4b15bad4c293320a20403108fddf9a4e01e24

  • SHA256

    fb13799f38c5c84c9c38d42b9f313e5a8e61cfe2a942c5f6c2ddadc6d7b560e9

  • SHA512

    b958e2eb1733009537bca43de0329c3070ca6a1f0e4a3d5ed39e238ae60c602d7509cb031cb44b579b796e3fa1f74354872fe7b2ef3d02725e285d880f50f112

  • SSDEEP

    768:RjtK+H8Mm8c2T0W/mF5MrcPLZ6GlGKXi8TH3:yw8p8cWAAiLPH3

Malware Config

Targets

    • Target

      d35f9f8e54da16c7be90006be195140d_JaffaCakes118

    • Size

      35KB

    • MD5

      d35f9f8e54da16c7be90006be195140d

    • SHA1

      7ae4b15bad4c293320a20403108fddf9a4e01e24

    • SHA256

      fb13799f38c5c84c9c38d42b9f313e5a8e61cfe2a942c5f6c2ddadc6d7b560e9

    • SHA512

      b958e2eb1733009537bca43de0329c3070ca6a1f0e4a3d5ed39e238ae60c602d7509cb031cb44b579b796e3fa1f74354872fe7b2ef3d02725e285d880f50f112

    • SSDEEP

      768:RjtK+H8Mm8c2T0W/mF5MrcPLZ6GlGKXi8TH3:yw8p8cWAAiLPH3

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks