General

  • Target

    25cff058fc8917d8c8c9ee6eaca29fa4_JaffaCakes118

  • Size

    372KB

  • Sample

    240704-w7szjssfjl

  • MD5

    25cff058fc8917d8c8c9ee6eaca29fa4

  • SHA1

    37b4551b6d59019ca04984b46337fc1684a5a019

  • SHA256

    38c01786b7fae917d83ae26778445af1ad234c3dcbd898577209ba893e55793b

  • SHA512

    04d72cc372c0cd5ce338c1eba6638c82816e98122b3e16074b3d3b22133c2aed43c3e2d38414d229f791b82ef16ac516a98a1fc4f2712b1712f74ae51692fc4b

  • SSDEEP

    6144:fj0ugflQsz1XIdAhDVC0k1h8DN5DIOYb8g8YUuPzH03jLbCVf02KHL4WkmUOM11O:4ugfSCFPVys5RYbPtUOboHL2iEWkmw1k

Score
10/10

Malware Config

Targets

    • Target

      25cff058fc8917d8c8c9ee6eaca29fa4_JaffaCakes118

    • Size

      372KB

    • MD5

      25cff058fc8917d8c8c9ee6eaca29fa4

    • SHA1

      37b4551b6d59019ca04984b46337fc1684a5a019

    • SHA256

      38c01786b7fae917d83ae26778445af1ad234c3dcbd898577209ba893e55793b

    • SHA512

      04d72cc372c0cd5ce338c1eba6638c82816e98122b3e16074b3d3b22133c2aed43c3e2d38414d229f791b82ef16ac516a98a1fc4f2712b1712f74ae51692fc4b

    • SSDEEP

      6144:fj0ugflQsz1XIdAhDVC0k1h8DN5DIOYb8g8YUuPzH03jLbCVf02KHL4WkmUOM11O:4ugfSCFPVys5RYbPtUOboHL2iEWkmw1k

    Score
    10/10
    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks