General

  • Target

    d1ba70d69e881fdc71ed009d635d4af9_JaffaCakes118

  • Size

    673KB

  • Sample

    240907-mk7dzszcqb

  • MD5

    d1ba70d69e881fdc71ed009d635d4af9

  • SHA1

    39a5b25977341ca1f805d7a34095977a2c68545e

  • SHA256

    9a3c50c3f26aaba8711fdc8e2b6c65d16425cafaf8127ddf939116df0e08d3ce

  • SHA512

    f57e7a65865000e74bf94bb27f30f160e39e304a3f2559f0e49a12f9d77c75c7ee5cb7f6883018eb85eb92dada57d61b3846542fb257d8b28f5a31acd9b0888f

  • SSDEEP

    12288:t79TggK4UJ2qiutAakn360j0+ax6mXEUsJ+ES2gjGmTi:vgEUgqiutwn36q0ZEUsRdmTi

Malware Config

Targets

    • Target

      d1ba70d69e881fdc71ed009d635d4af9_JaffaCakes118

    • Size

      673KB

    • MD5

      d1ba70d69e881fdc71ed009d635d4af9

    • SHA1

      39a5b25977341ca1f805d7a34095977a2c68545e

    • SHA256

      9a3c50c3f26aaba8711fdc8e2b6c65d16425cafaf8127ddf939116df0e08d3ce

    • SHA512

      f57e7a65865000e74bf94bb27f30f160e39e304a3f2559f0e49a12f9d77c75c7ee5cb7f6883018eb85eb92dada57d61b3846542fb257d8b28f5a31acd9b0888f

    • SSDEEP

      12288:t79TggK4UJ2qiutAakn360j0+ax6mXEUsJ+ES2gjGmTi:vgEUgqiutwn36q0ZEUsRdmTi

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks