General

  • Target

    e7a6b98a8440182d9607b5a9a394ab56_JaffaCakes118

  • Size

    28KB

  • Sample

    241212-wtnsnsslht

  • MD5

    e7a6b98a8440182d9607b5a9a394ab56

  • SHA1

    e1a0cbf353ffe3faa72b54c050460b207d0bfec5

  • SHA256

    f398740e50801e08d6f6e8802170df619969b1c16ebc381c01b5577001760682

  • SHA512

    1eb4ec3ebb7955c74dc75dec0556760b7ed0210d35a1e0a4f50cbde13edebe804f5a39895d51890d08f16cdb2df88ac13343f9db7e4ba74b29bf9f31066e8a83

  • SSDEEP

    768:tJpFHSLyupC2/kB5c3i1Cp/c1nj6UUxW/HjwZABWDa8:tJpFHSOuopPc3Np0nj6UUxiDwMD8

Malware Config

Targets

    • Target

      e7a6b98a8440182d9607b5a9a394ab56_JaffaCakes118

    • Size

      28KB

    • MD5

      e7a6b98a8440182d9607b5a9a394ab56

    • SHA1

      e1a0cbf353ffe3faa72b54c050460b207d0bfec5

    • SHA256

      f398740e50801e08d6f6e8802170df619969b1c16ebc381c01b5577001760682

    • SHA512

      1eb4ec3ebb7955c74dc75dec0556760b7ed0210d35a1e0a4f50cbde13edebe804f5a39895d51890d08f16cdb2df88ac13343f9db7e4ba74b29bf9f31066e8a83

    • SSDEEP

      768:tJpFHSLyupC2/kB5c3i1Cp/c1nj6UUxW/HjwZABWDa8:tJpFHSOuopPc3Np0nj6UUxiDwMD8

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks