General

  • Target

    d14133b31c1ee1bc07803f94c6383f5d_JaffaCakes118

  • Size

    90KB

  • Sample

    240907-gygslayfne

  • MD5

    d14133b31c1ee1bc07803f94c6383f5d

  • SHA1

    4eeb6c4e7a56dca1e34fdb4d2dff9c5c487afc46

  • SHA256

    37e60c70c4e68ebcf2c2160a2161de33a408379cb1ed90403fcbfe5fd2769cb0

  • SHA512

    1b1a2d0003430328a59b023adb9527ffaa443365a4b7266ce94381bc867bb5f1ca2feaeff5b1348fffccb01da7dc03a2cd6ace47d95192b2071329b115637906

  • SSDEEP

    1536:DLNq/8ECJj6kZSAHcL3aXVEVqY5diGhXECZpfsm0kZEPabOR/YrH5:DPdZSAMaXGVqcdXukZ/b6grZ

Malware Config

Targets

    • Target

      d14133b31c1ee1bc07803f94c6383f5d_JaffaCakes118

    • Size

      90KB

    • MD5

      d14133b31c1ee1bc07803f94c6383f5d

    • SHA1

      4eeb6c4e7a56dca1e34fdb4d2dff9c5c487afc46

    • SHA256

      37e60c70c4e68ebcf2c2160a2161de33a408379cb1ed90403fcbfe5fd2769cb0

    • SHA512

      1b1a2d0003430328a59b023adb9527ffaa443365a4b7266ce94381bc867bb5f1ca2feaeff5b1348fffccb01da7dc03a2cd6ace47d95192b2071329b115637906

    • SSDEEP

      1536:DLNq/8ECJj6kZSAHcL3aXVEVqY5diGhXECZpfsm0kZEPabOR/YrH5:DPdZSAMaXGVqcdXukZ/b6grZ

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks