General

  • Target

    e3e96d2734182d99183fe256081feb87_JaffaCakes118

  • Size

    223KB

  • Sample

    241212-azdn1aymcl

  • MD5

    e3e96d2734182d99183fe256081feb87

  • SHA1

    a6396109cd95bec16374aa243ffdc8170c7b489f

  • SHA256

    dec925e6121c18b16d8cbb9235aadc799f018b9a067efb1233c8567ffc335317

  • SHA512

    7b6b150a413f3aaecc5288de544e92d2f8093a46f281af7f250930c157dea3e36e5f19872d411bc4371675040ef94a46f42bbf9354f2f7c9519f2305cb02073a

  • SSDEEP

    3072:5o1kmwjN2fSGF+YPpYX86NPSwX6TVO3WI1aBM5TJCDFkAYAPc+4lgkuxki:m1OQ+YyHPleIx4DOtGcI

Malware Config

Targets

    • Target

      e3e96d2734182d99183fe256081feb87_JaffaCakes118

    • Size

      223KB

    • MD5

      e3e96d2734182d99183fe256081feb87

    • SHA1

      a6396109cd95bec16374aa243ffdc8170c7b489f

    • SHA256

      dec925e6121c18b16d8cbb9235aadc799f018b9a067efb1233c8567ffc335317

    • SHA512

      7b6b150a413f3aaecc5288de544e92d2f8093a46f281af7f250930c157dea3e36e5f19872d411bc4371675040ef94a46f42bbf9354f2f7c9519f2305cb02073a

    • SSDEEP

      3072:5o1kmwjN2fSGF+YPpYX86NPSwX6TVO3WI1aBM5TJCDFkAYAPc+4lgkuxki:m1OQ+YyHPleIx4DOtGcI

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks