General

  • Target

    fb1d81aa3e877b12002d34d18e75ce80_JaffaCakes118

  • Size

    109KB

  • Sample

    241218-l7szfavjbx

  • MD5

    fb1d81aa3e877b12002d34d18e75ce80

  • SHA1

    15f2a2d054f1c8dc5003412c45520c9228d54f59

  • SHA256

    98c43aadc9b52f7704649f8514c0a7cc1b91fa6a228502e2d8d6f795d951dc3a

  • SHA512

    c84ef25b4787ddf7ec1a7969f321f8a2a40a7723b82d4fe1ea516a28164a2fa11cecaa6ada9ccf1d4324ff002f69024ed6eee018639197d8e15b9436d2b32266

  • SSDEEP

    3072:/1+MJKrUnFYY5zpi0Nmbi5fJBNW9hGWFnout:lIrPH0NmWtNwtoS

Malware Config

Targets

    • Target

      fb1d81aa3e877b12002d34d18e75ce80_JaffaCakes118

    • Size

      109KB

    • MD5

      fb1d81aa3e877b12002d34d18e75ce80

    • SHA1

      15f2a2d054f1c8dc5003412c45520c9228d54f59

    • SHA256

      98c43aadc9b52f7704649f8514c0a7cc1b91fa6a228502e2d8d6f795d951dc3a

    • SHA512

      c84ef25b4787ddf7ec1a7969f321f8a2a40a7723b82d4fe1ea516a28164a2fa11cecaa6ada9ccf1d4324ff002f69024ed6eee018639197d8e15b9436d2b32266

    • SSDEEP

      3072:/1+MJKrUnFYY5zpi0Nmbi5fJBNW9hGWFnout:lIrPH0NmWtNwtoS

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks