General

  • Target
    jaffacakes118_Backdoor.Win32.Turkojan.ake.2dcbacb3aa38425171406ff8e4efa539
  • Size 346KB
  • Sample261016-m6abdadw7p
  • SHA256 6058e84d83c9fc2b03cb9a8596516f86f3af4545d290fdf49e4cf8488bc93840
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      jaffacakes118_Backdoor.Win32.Turkojan.ake.2dcbacb3aa38425171406ff8e4efa539
    • Size 346KB
    • SHA256 6058e84d83c9fc2b03cb9a8596516f86f3af4545d290fdf49e4cf8488bc93840
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v16

Tasks