General

  • Target

    d49098bc0d9da3ff6f682978d8337592_JaffaCakes118

  • Size

    603KB

  • Sample

    240908-rr8b3stapc

  • MD5

    d49098bc0d9da3ff6f682978d8337592

  • SHA1

    e557cf247bafe424b1c485838d98dd39ca65539a

  • SHA256

    acd876b2c42a52f18333655dc12a6ca421267403f0787b98d99365c5fc7218a8

  • SHA512

    4cfde00bceafe290b8ff069a3487ea88375b64bf7e4736bc93952d1b763a4b77ab5e9a6d7c89f6a544b59420d6d4019205d87e388512cc40a59c620b5e4839bc

  • SSDEEP

    12288:YtyQw9UDHQC60jnYDzUFxPp6PRZEqDaXSJOLJo0iEeNY:Yc1p0uo7R6PrvDaX+OWN

Malware Config

Targets

    • Target

      d49098bc0d9da3ff6f682978d8337592_JaffaCakes118

    • Size

      603KB

    • MD5

      d49098bc0d9da3ff6f682978d8337592

    • SHA1

      e557cf247bafe424b1c485838d98dd39ca65539a

    • SHA256

      acd876b2c42a52f18333655dc12a6ca421267403f0787b98d99365c5fc7218a8

    • SHA512

      4cfde00bceafe290b8ff069a3487ea88375b64bf7e4736bc93952d1b763a4b77ab5e9a6d7c89f6a544b59420d6d4019205d87e388512cc40a59c620b5e4839bc

    • SSDEEP

      12288:YtyQw9UDHQC60jnYDzUFxPp6PRZEqDaXSJOLJo0iEeNY:Yc1p0uo7R6PrvDaX+OWN

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks