General

  • Target

    cf21310dcd53322a2764113bfdf87cec_JaffaCakes118

  • Size

    1.3MB

  • Sample

    240906-kkjltaxarg

  • MD5

    cf21310dcd53322a2764113bfdf87cec

  • SHA1

    6b5f1acedafcfd482d1cc201ce75e19ec9bef846

  • SHA256

    cc0db545afe7ccf5bc09de20e8283506888568372e92bd40f96ca344a0042764

  • SHA512

    d552669fcd944111ad9a0d21a7241fa2ad837de7c39c8031a5b57c1691b737c92c9d22e936ab250ea14e7a857f1c8e3cebd7c6feb7cde9e2f9082f7ea6c0ad5c

  • SSDEEP

    24576:JkRUWtVYzUdzylmKIidzk7vcPDPRpQZFm5wGZQDXQ+B4B9Pg7:JkRUWtVHd2ljTDPPICwzXeBRY

Malware Config

Targets

    • Target

      cf21310dcd53322a2764113bfdf87cec_JaffaCakes118

    • Size

      1.3MB

    • MD5

      cf21310dcd53322a2764113bfdf87cec

    • SHA1

      6b5f1acedafcfd482d1cc201ce75e19ec9bef846

    • SHA256

      cc0db545afe7ccf5bc09de20e8283506888568372e92bd40f96ca344a0042764

    • SHA512

      d552669fcd944111ad9a0d21a7241fa2ad837de7c39c8031a5b57c1691b737c92c9d22e936ab250ea14e7a857f1c8e3cebd7c6feb7cde9e2f9082f7ea6c0ad5c

    • SSDEEP

      24576:JkRUWtVYzUdzylmKIidzk7vcPDPRpQZFm5wGZQDXQ+B4B9Pg7:JkRUWtVHd2ljTDPPICwzXeBRY

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks