General

  • Target

    f695a908758f9e18f4293139c7628fea_JaffaCakes118

  • Size

    1.6MB

  • Sample

    241216-bg1w9axqfk

  • MD5

    f695a908758f9e18f4293139c7628fea

  • SHA1

    79f2d1203482e3e767888559a9415ff6b8c6101f

  • SHA256

    90105acad6ab39ec6a8ccf9fd727e0793edee3327046772e94866369a1891a04

  • SHA512

    968cf42b228c975abf4f195e01776840d8d72d425927658f4bc7cc6d1b7063a7a7117a794b308ee6d7e4e3b61c0aa2ff038bbfa9f239e8d3a2cb39b77327fd74

  • SSDEEP

    6144:Eo02k3oodyJ7CI0IJsWdm5AHyw1hDoZG1AvF/xTsPrld:KJPySIJsWdEkP1X1sxyX

Malware Config

Targets

    • Target

      f695a908758f9e18f4293139c7628fea_JaffaCakes118

    • Size

      1.6MB

    • MD5

      f695a908758f9e18f4293139c7628fea

    • SHA1

      79f2d1203482e3e767888559a9415ff6b8c6101f

    • SHA256

      90105acad6ab39ec6a8ccf9fd727e0793edee3327046772e94866369a1891a04

    • SHA512

      968cf42b228c975abf4f195e01776840d8d72d425927658f4bc7cc6d1b7063a7a7117a794b308ee6d7e4e3b61c0aa2ff038bbfa9f239e8d3a2cb39b77327fd74

    • SSDEEP

      6144:Eo02k3oodyJ7CI0IJsWdm5AHyw1hDoZG1AvF/xTsPrld:KJPySIJsWdEkP1X1sxyX

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks