General

  • Target

    07c1c5bcb1cd1add57fc61db4acc25ab_JaffaCakes118

  • Size

    646KB

  • Sample

    240620-tz3sns1ejm

  • MD5

    07c1c5bcb1cd1add57fc61db4acc25ab

  • SHA1

    b6eda21fd0d090258eb3f3f5e298990fb9fdae9e

  • SHA256

    569d8d3d1e0a999f19dfb6b0a90172734c209b5b8123e2581b837d4c612c4cdf

  • SHA512

    13eba47ff72aca6219f04c9349be0c8474c585d42cdf7e4f77b2e313b446e538a29158e8342514ecc622be03cc485ef86eb9f6e520721caefc6d91bcde99e40a

  • SSDEEP

    12288:oa4iYr9Im0kJRkCPj1Qa0woiegYGnpKDVlSlCEwsKf0:oaPYr9ImpR9/ppegYJZlSlCEwsP

Score
10/10

Malware Config

Targets

    • Target

      07c1c5bcb1cd1add57fc61db4acc25ab_JaffaCakes118

    • Size

      646KB

    • MD5

      07c1c5bcb1cd1add57fc61db4acc25ab

    • SHA1

      b6eda21fd0d090258eb3f3f5e298990fb9fdae9e

    • SHA256

      569d8d3d1e0a999f19dfb6b0a90172734c209b5b8123e2581b837d4c612c4cdf

    • SHA512

      13eba47ff72aca6219f04c9349be0c8474c585d42cdf7e4f77b2e313b446e538a29158e8342514ecc622be03cc485ef86eb9f6e520721caefc6d91bcde99e40a

    • SSDEEP

      12288:oa4iYr9Im0kJRkCPj1Qa0woiegYGnpKDVlSlCEwsKf0:oaPYr9ImpR9/ppegYJZlSlCEwsP

    Score
    10/10
    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks