General

  • Target

    09a503f7b57e4914b42d3e93c7f2dcc4_JaffaCakes118

  • Size

    602KB

  • Sample

    240620-1xhs2sygna

  • MD5

    09a503f7b57e4914b42d3e93c7f2dcc4

  • SHA1

    297bd886a5bf37912c9a76813ca5ad0ba9087ee0

  • SHA256

    4585a83befe0a27607fc8a05c7776bdf165a9e60b8b15b7fe2fee74fa4353fb2

  • SHA512

    7750fc23f9403d9a3dd535b746e63435ca39d73e75954c7863ead62b5c2b81d074057e42128dfab1e7dccfacd4633c647aa8da140dbc4a453857b18331f34d18

  • SSDEEP

    12288:8sqDzFVVUI5Vry9dKvd2CD6itXRSDoctkHCURjJ51Vxd4F+UAEiV:8sq13/adKd3lsocOlVtKMzV

Score
10/10

Malware Config

Targets

    • Target

      09a503f7b57e4914b42d3e93c7f2dcc4_JaffaCakes118

    • Size

      602KB

    • MD5

      09a503f7b57e4914b42d3e93c7f2dcc4

    • SHA1

      297bd886a5bf37912c9a76813ca5ad0ba9087ee0

    • SHA256

      4585a83befe0a27607fc8a05c7776bdf165a9e60b8b15b7fe2fee74fa4353fb2

    • SHA512

      7750fc23f9403d9a3dd535b746e63435ca39d73e75954c7863ead62b5c2b81d074057e42128dfab1e7dccfacd4633c647aa8da140dbc4a453857b18331f34d18

    • SSDEEP

      12288:8sqDzFVVUI5Vry9dKvd2CD6itXRSDoctkHCURjJ51Vxd4F+UAEiV:8sq13/adKd3lsocOlVtKMzV

    Score
    10/10
    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks