General

  • Target

    ddf260ebb756d78613c86e2223f2d88b_JaffaCakes118

  • Size

    72KB

  • Sample

    240913-h7ym5s1gpc

  • MD5

    ddf260ebb756d78613c86e2223f2d88b

  • SHA1

    53798e47dd30adc3af841e6da81eb5d8e840fd57

  • SHA256

    237ff7bb262da84c0bc0e6660bcd9d8ec62c36cd870ed5267b04f5ba79ff0b34

  • SHA512

    64a0387ba90156cb383792d806d3f55b78b0d3c462ae6d4310e6a15b041cd8cfc4725fe93cec17394853da0c369bf1dde3d298bb5d13e5fab81019f23dee8093

  • SSDEEP

    1536:4gmaLKsqFVN79otJ9V28JSbzQB07I9UiN6gEIQ/VN4:VIVN7OJ9LiYzEL

Malware Config

Targets

    • Target

      ddf260ebb756d78613c86e2223f2d88b_JaffaCakes118

    • Size

      72KB

    • MD5

      ddf260ebb756d78613c86e2223f2d88b

    • SHA1

      53798e47dd30adc3af841e6da81eb5d8e840fd57

    • SHA256

      237ff7bb262da84c0bc0e6660bcd9d8ec62c36cd870ed5267b04f5ba79ff0b34

    • SHA512

      64a0387ba90156cb383792d806d3f55b78b0d3c462ae6d4310e6a15b041cd8cfc4725fe93cec17394853da0c369bf1dde3d298bb5d13e5fab81019f23dee8093

    • SSDEEP

      1536:4gmaLKsqFVN79otJ9V28JSbzQB07I9UiN6gEIQ/VN4:VIVN7OJ9LiYzEL

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks