General

  • Target

    e153e62ee6b7ee403d8a614e85c31805_JaffaCakes118

  • Size

    62KB

  • Sample

    240915-amklsavgna

  • MD5

    e153e62ee6b7ee403d8a614e85c31805

  • SHA1

    fa8ffa3158bac7e4723160d99acc8d838e4061b5

  • SHA256

    81b403beb50909855f79132952232544d9ba96ef181d504bba20f376974c07ce

  • SHA512

    ffd75d3729eaf0c84611d9d9ccc8f718270c9f2a3ca4d3defc24fee2354a3510cfb3ae7e037218ffc296b5a9556cc090b58170deffaf9d61aad77515f6f5d25f

  • SSDEEP

    768:1wwyxQouEWjSHD23fbU50aaaxwdYzsRPw8rt9pGUNJ8ZRjmhB7IRUIt5imVDsfKQ:Q4jqi5axwdrPpfNOpmhBEUIt5ifKxfO7

Malware Config

Targets

    • Target

      e153e62ee6b7ee403d8a614e85c31805_JaffaCakes118

    • Size

      62KB

    • MD5

      e153e62ee6b7ee403d8a614e85c31805

    • SHA1

      fa8ffa3158bac7e4723160d99acc8d838e4061b5

    • SHA256

      81b403beb50909855f79132952232544d9ba96ef181d504bba20f376974c07ce

    • SHA512

      ffd75d3729eaf0c84611d9d9ccc8f718270c9f2a3ca4d3defc24fee2354a3510cfb3ae7e037218ffc296b5a9556cc090b58170deffaf9d61aad77515f6f5d25f

    • SSDEEP

      768:1wwyxQouEWjSHD23fbU50aaaxwdYzsRPw8rt9pGUNJ8ZRjmhB7IRUIt5imVDsfKQ:Q4jqi5axwdrPpfNOpmhBEUIt5ifKxfO7

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks