General

  • Target

    db6651fea88477bf4df63d2e63ad8cda_JaffaCakes118

  • Size

    686KB

  • Sample

    240911-29f1nayerd

  • MD5

    db6651fea88477bf4df63d2e63ad8cda

  • SHA1

    e3c2f610a9e283dd28bc08cc82e30c6798f8ef30

  • SHA256

    c32c8b25fa70afefc564a6ac74dddf21a042bfebe08198c2d874d85f13a998de

  • SHA512

    e86df194170c42be939397569f282864b3e3bb39db023a8af5ce16329b634313be3afe49a11e0c0beaa1cf18688d4b6532004f0c5122466630712d115f664efa

  • SSDEEP

    12288:KZS7Bpm1OnB698Jzpz1iumeuYb+Pj08EdEcbIKCZ42UBJ13soMSGR0ldegBv:Kc8OnBpLi+xxEcMGGR6WgBv

Malware Config

Targets

    • Target

      db6651fea88477bf4df63d2e63ad8cda_JaffaCakes118

    • Size

      686KB

    • MD5

      db6651fea88477bf4df63d2e63ad8cda

    • SHA1

      e3c2f610a9e283dd28bc08cc82e30c6798f8ef30

    • SHA256

      c32c8b25fa70afefc564a6ac74dddf21a042bfebe08198c2d874d85f13a998de

    • SHA512

      e86df194170c42be939397569f282864b3e3bb39db023a8af5ce16329b634313be3afe49a11e0c0beaa1cf18688d4b6532004f0c5122466630712d115f664efa

    • SSDEEP

      12288:KZS7Bpm1OnB698Jzpz1iumeuYb+Pj08EdEcbIKCZ42UBJ13soMSGR0ldegBv:Kc8OnBpLi+xxEcMGGR6WgBv

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks