General

  • Target

    250bb75cf602877e1435d0e2f0ffd89f_JaffaCakes118

  • Size

    620KB

  • Sample

    240704-hwaryasblf

  • MD5

    250bb75cf602877e1435d0e2f0ffd89f

  • SHA1

    3d6398812dc535ca256c05f27503de013a8bea67

  • SHA256

    1a36fb779f8b16dc5a9d230e82d7bb4b0edb1eb973c3b94171b81d58c67d6906

  • SHA512

    f8c4a24374b0bd640162450645143a9418b825299e313be142a5e6ad96852c7d043fcab55901aa64a93f7483215e758c6ec2565ec0c484f3d16e401c0ddc6c69

  • SSDEEP

    12288:Ou1pbenHX6Ms5F1kNZDvKAwijrGsjAMZTF3Z4mxxoMMTa7AU6bitoN4bOa308SW4:O2pbenLs5FaLKAxrGib9QmXorTa0U6bH

Score
10/10

Malware Config

Targets

    • Target

      250bb75cf602877e1435d0e2f0ffd89f_JaffaCakes118

    • Size

      620KB

    • MD5

      250bb75cf602877e1435d0e2f0ffd89f

    • SHA1

      3d6398812dc535ca256c05f27503de013a8bea67

    • SHA256

      1a36fb779f8b16dc5a9d230e82d7bb4b0edb1eb973c3b94171b81d58c67d6906

    • SHA512

      f8c4a24374b0bd640162450645143a9418b825299e313be142a5e6ad96852c7d043fcab55901aa64a93f7483215e758c6ec2565ec0c484f3d16e401c0ddc6c69

    • SSDEEP

      12288:Ou1pbenHX6Ms5F1kNZDvKAwijrGsjAMZTF3Z4mxxoMMTa7AU6bitoN4bOa308SW4:O2pbenLs5FaLKAxrGib9QmXorTa0U6bH

    Score
    10/10
    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks