General

  • Target

    0abc8bda844a0c700357a3cede06d5fb_JaffaCakes118

  • Size

    1.2MB

  • Sample

    240621-llfrzsvcna

  • MD5

    0abc8bda844a0c700357a3cede06d5fb

  • SHA1

    a632210667f170bac29a7d6288e0b907aeed9f64

  • SHA256

    0c44b2c77e413e67f7f2a539bd7af3a1c5150e960a55e25c86f19971ff0f3fe9

  • SHA512

    5f0efc8669d7f4c1039646672be7b9d3122b20a9147be91147e86c863550afff2d9ae9da8ff5a1a4e233c98e83b676593179ad82f9812c7c4946363cae1bc119

  • SSDEEP

    24576:HER4MRBxd/3BMsUvKULn5hnvRKYTyVf3oMsA9eDUjoKz0nnWC:0Z5d/3BpUvlL7nvwYeV/oMbeDSoQGb

Malware Config

Targets

    • Target

      0abc8bda844a0c700357a3cede06d5fb_JaffaCakes118

    • Size

      1.2MB

    • MD5

      0abc8bda844a0c700357a3cede06d5fb

    • SHA1

      a632210667f170bac29a7d6288e0b907aeed9f64

    • SHA256

      0c44b2c77e413e67f7f2a539bd7af3a1c5150e960a55e25c86f19971ff0f3fe9

    • SHA512

      5f0efc8669d7f4c1039646672be7b9d3122b20a9147be91147e86c863550afff2d9ae9da8ff5a1a4e233c98e83b676593179ad82f9812c7c4946363cae1bc119

    • SSDEEP

      24576:HER4MRBxd/3BMsUvKULn5hnvRKYTyVf3oMsA9eDUjoKz0nnWC:0Z5d/3BpUvlL7nvwYeV/oMbeDSoQGb

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks