General

  • Target

    25d3a71f1444960622531412fe6056d5_JaffaCakes118

  • Size

    627KB

  • Sample

    240704-w94ttssfrm

  • MD5

    25d3a71f1444960622531412fe6056d5

  • SHA1

    20318ab09499c60714f9e68e99f0598fdfb977ad

  • SHA256

    b1c7f6bff6a51926e4b05364f3f02794d16e329f72b46d4413d95b2f53a69ef8

  • SHA512

    36ad5c58c13fc907ddeada415bb05d895952795ccc546a5ac80538d5901ed3289b750f914c3769d0027aeb3bab075b319fc7f2d255ff8ca688a415665061a532

  • SSDEEP

    12288:zHz3K7yEK4TRCR+atjgKA563tF3Z4mxxKTkmJ0Y24VzRpDHMi:H2yuTRC+MtQmXzmOY/h4i

Score
10/10

Malware Config

Targets

    • Target

      25d3a71f1444960622531412fe6056d5_JaffaCakes118

    • Size

      627KB

    • MD5

      25d3a71f1444960622531412fe6056d5

    • SHA1

      20318ab09499c60714f9e68e99f0598fdfb977ad

    • SHA256

      b1c7f6bff6a51926e4b05364f3f02794d16e329f72b46d4413d95b2f53a69ef8

    • SHA512

      36ad5c58c13fc907ddeada415bb05d895952795ccc546a5ac80538d5901ed3289b750f914c3769d0027aeb3bab075b319fc7f2d255ff8ca688a415665061a532

    • SSDEEP

      12288:zHz3K7yEK4TRCR+atjgKA563tF3Z4mxxKTkmJ0Y24VzRpDHMi:H2yuTRC+MtQmXzmOY/h4i

    Score
    10/10
    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks