General

  • Target

    22efcace918fd3ba4dc9088d493cc925_JaffaCakes118

  • Size

    752KB

  • Sample

    240703-tcvhsayaja

  • MD5

    22efcace918fd3ba4dc9088d493cc925

  • SHA1

    4709b9703f0bcc0feecc47ee10d6ea81427e2255

  • SHA256

    f88c9f550ea8f04bba7e3024c52bf668d0858ce11e2d67a01915a566ea60758f

  • SHA512

    1fcd4a75bee6db9e71d9f235462cb26e70c18f8f52d4e14f049dfddd38d52913f28e540f367d9deb694278644003fcdffa33b7a1b37768cf368916348fe5d5b0

  • SSDEEP

    12288:/5ef/444S2n1WEdvUNk7M1BmV/EEZfi+oKiKSF3Z4mxxieaTMghvxApLPZvriYkw:hQP4b1Ddsq7nV/EEZfi+LWQmXLaTMgho

Score
10/10

Malware Config

Targets

    • Target

      22efcace918fd3ba4dc9088d493cc925_JaffaCakes118

    • Size

      752KB

    • MD5

      22efcace918fd3ba4dc9088d493cc925

    • SHA1

      4709b9703f0bcc0feecc47ee10d6ea81427e2255

    • SHA256

      f88c9f550ea8f04bba7e3024c52bf668d0858ce11e2d67a01915a566ea60758f

    • SHA512

      1fcd4a75bee6db9e71d9f235462cb26e70c18f8f52d4e14f049dfddd38d52913f28e540f367d9deb694278644003fcdffa33b7a1b37768cf368916348fe5d5b0

    • SSDEEP

      12288:/5ef/444S2n1WEdvUNk7M1BmV/EEZfi+oKiKSF3Z4mxxieaTMghvxApLPZvriYkw:hQP4b1Ddsq7nV/EEZfi+LWQmXLaTMgho

    Score
    10/10
    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks