General

  • Target

    e83db1a7869c9e87b33736875765ab7a_JaffaCakes118

  • Size

    98KB

  • Sample

    241212-zqzybayqhp

  • MD5

    e83db1a7869c9e87b33736875765ab7a

  • SHA1

    539fac361eaeed508d7cf0b18915c54e77f001be

  • SHA256

    09ab96f15eb667dde711f954851b1c5e322a5b11b43f2e61ccaf0ddd16512ade

  • SHA512

    e355a1c58332d1fde97a568bf7cbb61e43c2f58eed914e417ac9174df12829bbc2e8fea6a6c61d87f56b59821d36f2225c98e0ce6a37605d5560f46dd6a1c124

  • SSDEEP

    3072:P3qu2iVSI/u6Viw0fkJBIcp3wL4HFjL5ai:X1AImQiZfkJBry4BL

Malware Config

Targets

    • Target

      e83db1a7869c9e87b33736875765ab7a_JaffaCakes118

    • Size

      98KB

    • MD5

      e83db1a7869c9e87b33736875765ab7a

    • SHA1

      539fac361eaeed508d7cf0b18915c54e77f001be

    • SHA256

      09ab96f15eb667dde711f954851b1c5e322a5b11b43f2e61ccaf0ddd16512ade

    • SHA512

      e355a1c58332d1fde97a568bf7cbb61e43c2f58eed914e417ac9174df12829bbc2e8fea6a6c61d87f56b59821d36f2225c98e0ce6a37605d5560f46dd6a1c124

    • SSDEEP

      3072:P3qu2iVSI/u6Viw0fkJBIcp3wL4HFjL5ai:X1AImQiZfkJBry4BL

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks