General

  • Target

    e29756d9c24b3ad80aade5a3ead9c41b_JaffaCakes118

  • Size

    795KB

  • Sample

    240915-qrpz3avhjd

  • MD5

    e29756d9c24b3ad80aade5a3ead9c41b

  • SHA1

    4aaf832ac117841bb3c4edf5f0ecf67ec4a31569

  • SHA256

    0e251a0cafd79924069e3132cd2f8983effe07c8360dd489fbde927d2c9775fc

  • SHA512

    1d48e48ab756e73474d158b2661f1860ab45a4d0b7031c027f4d2c407c4b6b901776459e44e4a2156e10e1a69259984f00863b2a5978a31ad2ac593f24f9da3f

  • SSDEEP

    24576:8gsmSe5ReF4S2rIbSU1sZk5K239pZ9dOwkq4W6S:8+SxF4ElI2tpkwQW1

Malware Config

Targets

    • Target

      e29756d9c24b3ad80aade5a3ead9c41b_JaffaCakes118

    • Size

      795KB

    • MD5

      e29756d9c24b3ad80aade5a3ead9c41b

    • SHA1

      4aaf832ac117841bb3c4edf5f0ecf67ec4a31569

    • SHA256

      0e251a0cafd79924069e3132cd2f8983effe07c8360dd489fbde927d2c9775fc

    • SHA512

      1d48e48ab756e73474d158b2661f1860ab45a4d0b7031c027f4d2c407c4b6b901776459e44e4a2156e10e1a69259984f00863b2a5978a31ad2ac593f24f9da3f

    • SSDEEP

      24576:8gsmSe5ReF4S2rIbSU1sZk5K239pZ9dOwkq4W6S:8+SxF4ElI2tpkwQW1

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks