General

  • Target

    d703334affd22c91b42cb82f4ec0aea1_JaffaCakes118

  • Size

    528KB

  • Sample

    240909-yvd1zaxdqk

  • MD5

    d703334affd22c91b42cb82f4ec0aea1

  • SHA1

    a198d5feaecbacc46f2444173cb7cd9e198e7d94

  • SHA256

    8447060f4956925438543e6eed166f561fc1b135a4c8d3f90dff3e72c670f26a

  • SHA512

    e5ac17dacd0d97cad5786becbec746b0e39aca3d34a1fa2f2a343eebf3d92c155955ac04dff360066a9d60412f677a27428a5ef2a64600037cdcc6d1f06803a3

  • SSDEEP

    12288:J3MitKLewjuJUeCkrcUVznYvbU/EGM3WAeRHGeb/qT9AHT+:MSRJUeCkTVzYPW9Geb/quHy

Malware Config

Targets

    • Target

      d703334affd22c91b42cb82f4ec0aea1_JaffaCakes118

    • Size

      528KB

    • MD5

      d703334affd22c91b42cb82f4ec0aea1

    • SHA1

      a198d5feaecbacc46f2444173cb7cd9e198e7d94

    • SHA256

      8447060f4956925438543e6eed166f561fc1b135a4c8d3f90dff3e72c670f26a

    • SHA512

      e5ac17dacd0d97cad5786becbec746b0e39aca3d34a1fa2f2a343eebf3d92c155955ac04dff360066a9d60412f677a27428a5ef2a64600037cdcc6d1f06803a3

    • SSDEEP

      12288:J3MitKLewjuJUeCkrcUVznYvbU/EGM3WAeRHGeb/qT9AHT+:MSRJUeCkTVzYPW9Geb/quHy

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks