General

  • Target

    de23d569b50a2b684a163818a2daf71f_JaffaCakes118

  • Size

    735KB

  • Sample

    240913-lcf2dswfmh

  • MD5

    de23d569b50a2b684a163818a2daf71f

  • SHA1

    d269320b087a99fbbd2bbba297c121b12b8d47a2

  • SHA256

    938fa8cd23f3fc51be3106eb8991a2bed9c4dac188f4eaa708585ad83f4356f9

  • SHA512

    81c3e2541603ac359e622bed6eb0c9496bf94b249b64a6c60d1ec5f081982968e2c7743c0d0f92d3c05282379c00ae378c3c5d2cb4aa7a8827ce902211a435e7

  • SSDEEP

    12288:R4r67oM8MXxupIDwI7xXaR0QA55260qeEvtsoc4wLvJCOCpJfzrxjHlshmKA:am7oM8MXIpI5kR42YeEvtsoc4wLvJC7H

Malware Config

Targets

    • Target

      de23d569b50a2b684a163818a2daf71f_JaffaCakes118

    • Size

      735KB

    • MD5

      de23d569b50a2b684a163818a2daf71f

    • SHA1

      d269320b087a99fbbd2bbba297c121b12b8d47a2

    • SHA256

      938fa8cd23f3fc51be3106eb8991a2bed9c4dac188f4eaa708585ad83f4356f9

    • SHA512

      81c3e2541603ac359e622bed6eb0c9496bf94b249b64a6c60d1ec5f081982968e2c7743c0d0f92d3c05282379c00ae378c3c5d2cb4aa7a8827ce902211a435e7

    • SSDEEP

      12288:R4r67oM8MXxupIDwI7xXaR0QA55260qeEvtsoc4wLvJCOCpJfzrxjHlshmKA:am7oM8MXIpI5kR42YeEvtsoc4wLvJC7H

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.