General

  • Target

    f9f0db867ad240a26f1c52d4e1aec92e_JaffaCakes118

  • Size

    27KB

  • Sample

    241218-d6b1ja1ncx

  • MD5

    f9f0db867ad240a26f1c52d4e1aec92e

  • SHA1

    da2efe147ddf5b72b7a203c4e609c2e61452a1a2

  • SHA256

    f50374c2b8ac21c475facb778e98360798d5793ada445fe4e2918c54a6a75094

  • SHA512

    9cdf6541e17ac2b59f7e6e03c798e12e48b9579c122a91d716143a22d07bdf57a510a2fe05c998fd1c279b7db9e7491e53eb87bad2ba622d54d02f77a26cb5d7

  • SSDEEP

    768:JJpFHSLyupC2/kEBW0WgF052GcL9vfdKe5:JJpFHSOuopEgBo0ghU8

Malware Config

Targets

    • Target

      f9f0db867ad240a26f1c52d4e1aec92e_JaffaCakes118

    • Size

      27KB

    • MD5

      f9f0db867ad240a26f1c52d4e1aec92e

    • SHA1

      da2efe147ddf5b72b7a203c4e609c2e61452a1a2

    • SHA256

      f50374c2b8ac21c475facb778e98360798d5793ada445fe4e2918c54a6a75094

    • SHA512

      9cdf6541e17ac2b59f7e6e03c798e12e48b9579c122a91d716143a22d07bdf57a510a2fe05c998fd1c279b7db9e7491e53eb87bad2ba622d54d02f77a26cb5d7

    • SSDEEP

      768:JJpFHSLyupC2/kEBW0WgF052GcL9vfdKe5:JJpFHSOuopEgBo0ghU8

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks