General

  • Target

    fec9520acb193ba26babe91a539659d1_JaffaCakes118

  • Size

    36KB

  • Sample

    241219-g4bhrsslay

  • MD5

    fec9520acb193ba26babe91a539659d1

  • SHA1

    7dc1833b7e9433340e32fc53944b8a0df2d7c04b

  • SHA256

    c070fd3ea79c710d553f16e5994eb894b739c6c31d580e9bed72ba2f21220eb9

  • SHA512

    6db71721f4d93c69ce68825d1cd3a4c071395dc486756873010da0d59794cb9f4fce01491d1da366d2c341b728b160f0566d108a18951557c9ae22e5824faa94

  • SSDEEP

    768:i12QAp628zKGIxxfKECu33C2N37StWSv7/o3Nxwhayk:i12QAp3MKGITfK9/24tvk9xKk

Malware Config

Targets

    • Target

      fec9520acb193ba26babe91a539659d1_JaffaCakes118

    • Size

      36KB

    • MD5

      fec9520acb193ba26babe91a539659d1

    • SHA1

      7dc1833b7e9433340e32fc53944b8a0df2d7c04b

    • SHA256

      c070fd3ea79c710d553f16e5994eb894b739c6c31d580e9bed72ba2f21220eb9

    • SHA512

      6db71721f4d93c69ce68825d1cd3a4c071395dc486756873010da0d59794cb9f4fce01491d1da366d2c341b728b160f0566d108a18951557c9ae22e5824faa94

    • SSDEEP

      768:i12QAp628zKGIxxfKECu33C2N37StWSv7/o3Nxwhayk:i12QAp3MKGITfK9/24tvk9xKk

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks