General

  • Target

    e10780895bb0b22683d910f09c8f6d78_JaffaCakes118

  • Size

    62KB

  • Sample

    240914-zvmhsawcpl

  • MD5

    e10780895bb0b22683d910f09c8f6d78

  • SHA1

    1d134adb333ff0067f38d4e6edfdc72ef25a07d0

  • SHA256

    bf5137ce5ca043dc9f397a676873b984e1fe3cee7c39acf9b4a50ee301765f7f

  • SHA512

    16d865a1dea4765f427a0ca782301e3be306b64aaf4afc847a91a48c76439ae58f58a21b503b609ce41e39ba9058ff811fd903a3114b69608a099caa826fb14b

  • SSDEEP

    768:swwyxQouEWjSHD23fbU50aaaxwdYzsRgw8rt9pGUNJ8ZRjmhB7IRUIt5imVDsfK5:Z4jqi5axwdaPpfNOpmhBEUIt5ifKxfOq

Malware Config

Targets

    • Target

      e10780895bb0b22683d910f09c8f6d78_JaffaCakes118

    • Size

      62KB

    • MD5

      e10780895bb0b22683d910f09c8f6d78

    • SHA1

      1d134adb333ff0067f38d4e6edfdc72ef25a07d0

    • SHA256

      bf5137ce5ca043dc9f397a676873b984e1fe3cee7c39acf9b4a50ee301765f7f

    • SHA512

      16d865a1dea4765f427a0ca782301e3be306b64aaf4afc847a91a48c76439ae58f58a21b503b609ce41e39ba9058ff811fd903a3114b69608a099caa826fb14b

    • SSDEEP

      768:swwyxQouEWjSHD23fbU50aaaxwdYzsRgw8rt9pGUNJ8ZRjmhB7IRUIt5imVDsfK5:Z4jqi5axwdaPpfNOpmhBEUIt5ifKxfOq

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks