General

  • Target

    JaffaCakes118_9851f67b2aa7f8c80adf5addd00a5ab8

  • Size

    829KB

  • Sample

    250330-hjr6fsssdt

  • MD5

    9851f67b2aa7f8c80adf5addd00a5ab8

  • SHA1

    399b53bd63ccf2ff9c292bea0ebd56953c3bee0f

  • SHA256

    29ae9ace722eed00b7d827fe7d3ce03e7c506e9253011da9eda468ccffaa050e

  • SHA512

    721d032fb42aa0875513d21fa6bfa9aa112fcfb7da1c013305094d831bcecf56bf3bb602095ef3f051966283635f18e88d35883b2f3bdeaa1746d28d929cbae2

  • SSDEEP

    24576:z5AOz0veUQTXENjA0lLHCkv2up3g37LQ2u0:z5AO9XwXl+3vQv0

Malware Config

Targets

    • Target

      JaffaCakes118_9851f67b2aa7f8c80adf5addd00a5ab8

    • Size

      829KB

    • MD5

      9851f67b2aa7f8c80adf5addd00a5ab8

    • SHA1

      399b53bd63ccf2ff9c292bea0ebd56953c3bee0f

    • SHA256

      29ae9ace722eed00b7d827fe7d3ce03e7c506e9253011da9eda468ccffaa050e

    • SHA512

      721d032fb42aa0875513d21fa6bfa9aa112fcfb7da1c013305094d831bcecf56bf3bb602095ef3f051966283635f18e88d35883b2f3bdeaa1746d28d929cbae2

    • SSDEEP

      24576:z5AOz0veUQTXENjA0lLHCkv2up3g37LQ2u0:z5AO9XwXl+3vQv0

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks