General

  • Target

    96a35777256b0ca9dffe94aa45b1f99a_JaffaCakes118

  • Size

    293KB

  • Sample

    240814-sraaqazane

  • MD5

    96a35777256b0ca9dffe94aa45b1f99a

  • SHA1

    cdc9c276979612b03ee92d48a63892ae0209e6c4

  • SHA256

    e9efdeb32f97783abfe6250b785d43fd1a38329d34d3bc13656cb37625820e63

  • SHA512

    54cd8262864a92f7384d0f8c55e7b2d0c4a1ef45855d47cb2089a2590df839bdb4643e772053acd99fc3f22d2f0b1054803dacd0ec9145ea0708a7e960322d31

  • SSDEEP

    6144:zq3qfVvOdaEAvID4sicwdRCms1h3Axyw4f1f:cqfxrIBivR01htfF

Malware Config

Targets

    • Target

      96a35777256b0ca9dffe94aa45b1f99a_JaffaCakes118

    • Size

      293KB

    • MD5

      96a35777256b0ca9dffe94aa45b1f99a

    • SHA1

      cdc9c276979612b03ee92d48a63892ae0209e6c4

    • SHA256

      e9efdeb32f97783abfe6250b785d43fd1a38329d34d3bc13656cb37625820e63

    • SHA512

      54cd8262864a92f7384d0f8c55e7b2d0c4a1ef45855d47cb2089a2590df839bdb4643e772053acd99fc3f22d2f0b1054803dacd0ec9145ea0708a7e960322d31

    • SSDEEP

      6144:zq3qfVvOdaEAvID4sicwdRCms1h3Axyw4f1f:cqfxrIBivR01htfF

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks