General

  • Target

    dd41975ba9ace29e07f9dda6ca6f4b46_JaffaCakes118

  • Size

    570KB

  • Sample

    240912-3q44tasfkb

  • MD5

    dd41975ba9ace29e07f9dda6ca6f4b46

  • SHA1

    fe10e0318b44b5cb490bacb78a8a2e36848ea919

  • SHA256

    02bf5fb8e42fcdbc686a834eeab0346dd7929b7ff6c0c3df30cd841cb00f2d53

  • SHA512

    dd8c08c4b95c9e037edcf5d89eb7210e4bcaad9254f1504dce49e6f70987b2d612ae5e53a363faa0999a5f6c3b468356c1496f3fe73ef77a3e36abc997945aff

  • SSDEEP

    12288:UsHirJnVJJJJDydRC+FXd3pzzRIY2VgP2w3+8AuuDyHJ/Lq61G:TCpVJJJJDdCpzzRn2VgP285uDyHJzq6

Malware Config

Targets

    • Target

      dd41975ba9ace29e07f9dda6ca6f4b46_JaffaCakes118

    • Size

      570KB

    • MD5

      dd41975ba9ace29e07f9dda6ca6f4b46

    • SHA1

      fe10e0318b44b5cb490bacb78a8a2e36848ea919

    • SHA256

      02bf5fb8e42fcdbc686a834eeab0346dd7929b7ff6c0c3df30cd841cb00f2d53

    • SHA512

      dd8c08c4b95c9e037edcf5d89eb7210e4bcaad9254f1504dce49e6f70987b2d612ae5e53a363faa0999a5f6c3b468356c1496f3fe73ef77a3e36abc997945aff

    • SSDEEP

      12288:UsHirJnVJJJJDydRC+FXd3pzzRIY2VgP2w3+8AuuDyHJ/Lq61G:TCpVJJJJDdCpzzRn2VgP285uDyHJzq6

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks