General

  • Target

    d159828b7d5098609af8d91fd41f5718_JaffaCakes118

  • Size

    144KB

  • Sample

    241208-w168lawnfp

  • MD5

    d159828b7d5098609af8d91fd41f5718

  • SHA1

    a488ed4f2461b29d7c2d42721d3cdeb8b4e14bfe

  • SHA256

    bb8f340132c7101cf849c226a0e0aef193b03e320bd65f668e5a9f74b8231dbe

  • SHA512

    9672969b722260fb663fec065d6b955a68fbb1651299c982d17439a87a8b9140471ec09a7ba214a5a1e4de3ccafd155fd3910858c1a26f12d4d53a30a9451732

  • SSDEEP

    1536:z0q4Q6mueDbPEPiHCj/PKrOP8B0h2ZOO49TBWYQM:43zLZKr68B0kOOmQJM

Malware Config

Targets

    • Target

      d159828b7d5098609af8d91fd41f5718_JaffaCakes118

    • Size

      144KB

    • MD5

      d159828b7d5098609af8d91fd41f5718

    • SHA1

      a488ed4f2461b29d7c2d42721d3cdeb8b4e14bfe

    • SHA256

      bb8f340132c7101cf849c226a0e0aef193b03e320bd65f668e5a9f74b8231dbe

    • SHA512

      9672969b722260fb663fec065d6b955a68fbb1651299c982d17439a87a8b9140471ec09a7ba214a5a1e4de3ccafd155fd3910858c1a26f12d4d53a30a9451732

    • SSDEEP

      1536:z0q4Q6mueDbPEPiHCj/PKrOP8B0h2ZOO49TBWYQM:43zLZKr68B0kOOmQJM

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

MITRE ATT&CK Enterprise v15

Tasks