General

  • Target

    da2ec702e12bfa2256dc9ee50712968b_JaffaCakes118

  • Size

    91KB

  • Sample

    240911-mybt8swclk

  • MD5

    da2ec702e12bfa2256dc9ee50712968b

  • SHA1

    b10017a79e7e7cef74b6ce0f500c90d3306d9eeb

  • SHA256

    54c7f8d584658344fc57cf30b886361cd008a2937a957917d42cc67d68120d41

  • SHA512

    df7db037831d7af269f1fbb19fda5f0ebf0d5d56c448a358c1dae8871cdcacc7e7b6c96a9c7c01300268b7587650a367beab7274e005b0adcd72971342ce912a

  • SSDEEP

    1536:q1qkE/MD5yMkhMwOnbNQKLjWDyy1o5I0pJUEbooPRrKKRSqBXPA:QndxNQKPWDyDI0pJltZrpRS0X4

Malware Config

Targets

    • Target

      da2ec702e12bfa2256dc9ee50712968b_JaffaCakes118

    • Size

      91KB

    • MD5

      da2ec702e12bfa2256dc9ee50712968b

    • SHA1

      b10017a79e7e7cef74b6ce0f500c90d3306d9eeb

    • SHA256

      54c7f8d584658344fc57cf30b886361cd008a2937a957917d42cc67d68120d41

    • SHA512

      df7db037831d7af269f1fbb19fda5f0ebf0d5d56c448a358c1dae8871cdcacc7e7b6c96a9c7c01300268b7587650a367beab7274e005b0adcd72971342ce912a

    • SSDEEP

      1536:q1qkE/MD5yMkhMwOnbNQKLjWDyy1o5I0pJUEbooPRrKKRSqBXPA:QndxNQKPWDyDI0pJltZrpRS0X4

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks