General

  • Target

    d2d10814ee6b0a5bf36acc9240ddf56f_JaffaCakes118

  • Size

    218KB

  • Sample

    240907-zpd98avapp

  • MD5

    d2d10814ee6b0a5bf36acc9240ddf56f

  • SHA1

    afe9f9bcde7b18b7e710c40ac1349ba111251f0c

  • SHA256

    ed6816e15e784c7888c0a3c813312dd561d397066fa6eeb37dcaa27cb6c85666

  • SHA512

    f064c68892e48953d28c7fa3bb486938b02e522bce45fb65364087e1fd26372e1c8159db4450bd7bb5ea902e120eedf83c0a0dbdd9197b96767faeae5b88e1ff

  • SSDEEP

    6144:evSKyJn0qHc4GEx3msaJ4AddMWYcGAU1bL3mbbkjG:vJn0qHc4d2sLdbcXmHKk

Malware Config

Targets

    • Target

      d2d10814ee6b0a5bf36acc9240ddf56f_JaffaCakes118

    • Size

      218KB

    • MD5

      d2d10814ee6b0a5bf36acc9240ddf56f

    • SHA1

      afe9f9bcde7b18b7e710c40ac1349ba111251f0c

    • SHA256

      ed6816e15e784c7888c0a3c813312dd561d397066fa6eeb37dcaa27cb6c85666

    • SHA512

      f064c68892e48953d28c7fa3bb486938b02e522bce45fb65364087e1fd26372e1c8159db4450bd7bb5ea902e120eedf83c0a0dbdd9197b96767faeae5b88e1ff

    • SSDEEP

      6144:evSKyJn0qHc4GEx3msaJ4AddMWYcGAU1bL3mbbkjG:vJn0qHc4d2sLdbcXmHKk

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks