General

  • Target

    06d7ed712a3ed748dc5c989efddef79f_JaffaCakes118

  • Size

    726KB

  • Sample

    240620-rvqw7ssdjf

  • MD5

    06d7ed712a3ed748dc5c989efddef79f

  • SHA1

    4624101d143e45e585944fad9a857373f9e6ee35

  • SHA256

    da07cd3e3d3ab2aedb125ef30aff46f2c9d63282f205dab49d030f7d0776e8ee

  • SHA512

    b8e45111f384ad6f6ce352fc83e03514a7803fd6863bfb5a9572cb98fb10a6d014c94be43a2d4df4f386d2ba90a905eca47eb9e1f1cf94d8245abbc4151e5807

  • SSDEEP

    12288:W8k37stBEScWoGdqDkg16l9xneh73U9sPG7SpWO5gqTQEa6K:W8kL0BfTdqDktl3OA+NWO2qTQpl

Score
10/10

Malware Config

Targets

    • Target

      06d7ed712a3ed748dc5c989efddef79f_JaffaCakes118

    • Size

      726KB

    • MD5

      06d7ed712a3ed748dc5c989efddef79f

    • SHA1

      4624101d143e45e585944fad9a857373f9e6ee35

    • SHA256

      da07cd3e3d3ab2aedb125ef30aff46f2c9d63282f205dab49d030f7d0776e8ee

    • SHA512

      b8e45111f384ad6f6ce352fc83e03514a7803fd6863bfb5a9572cb98fb10a6d014c94be43a2d4df4f386d2ba90a905eca47eb9e1f1cf94d8245abbc4151e5807

    • SSDEEP

      12288:W8k37stBEScWoGdqDkg16l9xneh73U9sPG7SpWO5gqTQEa6K:W8kL0BfTdqDktl3OA+NWO2qTQpl

    Score
    10/10
    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks