General

  • Target

    d599488a1f3eeae8a64687aced847fad_JaffaCakes118

  • Size

    1.2MB

  • Sample

    241208-gta49avqhz

  • MD5

    d599488a1f3eeae8a64687aced847fad

  • SHA1

    dfb78edb35197f2f80519fcde991b132c6184160

  • SHA256

    099a1c2361247e7e74ed6f13b09421bcca71d2fb5641d8db3a922f6272d32666

  • SHA512

    74f9ca9a2a9cf659681f111d3fdd305dd94c68d21054c5947be887a1c74ec70b8ac269e60524b6836593006d96baa4cb5c6c9aa8436cd11aad286d51beed61ec

  • SSDEEP

    24576:VV0fsaxQV7w49bwKxtkkgV0fsaxQV7w49bwKxtkL:VV0GV7Tww9gV0GV7Twwa

Malware Config

Targets

    • Target

      d599488a1f3eeae8a64687aced847fad_JaffaCakes118

    • Size

      1.2MB

    • MD5

      d599488a1f3eeae8a64687aced847fad

    • SHA1

      dfb78edb35197f2f80519fcde991b132c6184160

    • SHA256

      099a1c2361247e7e74ed6f13b09421bcca71d2fb5641d8db3a922f6272d32666

    • SHA512

      74f9ca9a2a9cf659681f111d3fdd305dd94c68d21054c5947be887a1c74ec70b8ac269e60524b6836593006d96baa4cb5c6c9aa8436cd11aad286d51beed61ec

    • SSDEEP

      24576:VV0fsaxQV7w49bwKxtkkgV0fsaxQV7w49bwKxtkL:VV0GV7Tww9gV0GV7Twwa

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks