General

  • Target

    fc863619442b984950a293daaa218f22_JaffaCakes118

  • Size

    37KB

  • Sample

    241218-wcdw5swqgv

  • MD5

    fc863619442b984950a293daaa218f22

  • SHA1

    55b302d40f50737630658abccb4065e897a6e018

  • SHA256

    01b661e94e2487ac3f6da6893ec126cc60c6c87d58aeec8bfc7620fea7c82c33

  • SHA512

    110fe336053da074d50fb291faced196ec4925a38ca960e1cc1da58885f15d93e0eb3cbb61387d5b750c1991419dc847cfca9982065f451d98bad0347f195326

  • SSDEEP

    768:i2hqVaXthyz8IxtonIJ4yY5rGfF3J1Rd/5va7OO/sedCKFRYwX4Kpjp:i2UV8tzIx+nIiywifhQ6O/s8F244A1

Malware Config

Targets

    • Target

      fc863619442b984950a293daaa218f22_JaffaCakes118

    • Size

      37KB

    • MD5

      fc863619442b984950a293daaa218f22

    • SHA1

      55b302d40f50737630658abccb4065e897a6e018

    • SHA256

      01b661e94e2487ac3f6da6893ec126cc60c6c87d58aeec8bfc7620fea7c82c33

    • SHA512

      110fe336053da074d50fb291faced196ec4925a38ca960e1cc1da58885f15d93e0eb3cbb61387d5b750c1991419dc847cfca9982065f451d98bad0347f195326

    • SSDEEP

      768:i2hqVaXthyz8IxtonIJ4yY5rGfF3J1Rd/5va7OO/sedCKFRYwX4Kpjp:i2UV8tzIx+nIiywifhQ6O/s8F244A1

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks