General

  • Target

    e31655fd483beedfc4ca77e3273473b4_JaffaCakes118

  • Size

    733KB

  • Sample

    240915-wph2mawbjh

  • MD5

    e31655fd483beedfc4ca77e3273473b4

  • SHA1

    8616ec8cb737c5f56845c63f8002ea92fb353672

  • SHA256

    2acc6bafcbc97e42231fbb8ddf2ee73e284799ad9ad2c9b2da90b07d593a1b29

  • SHA512

    7af05e3a6dd17fafd6bb8aff6d0fbc9b281dd447aba766cccff95efa868dddd360a64e9456c0dc4d0a27c52039732fca93a43f67f1aa99144336b2b86fd76b83

  • SSDEEP

    12288:Nc//////qCHkdPLQ/oV6a1xEUQ4IfV8k9YGhGV3m8VWUY2TD9MAX+hmXhVITCFS:Nc//////JEdDyaDm4dahGV3hko1MAX+z

Malware Config

Targets

    • Target

      e31655fd483beedfc4ca77e3273473b4_JaffaCakes118

    • Size

      733KB

    • MD5

      e31655fd483beedfc4ca77e3273473b4

    • SHA1

      8616ec8cb737c5f56845c63f8002ea92fb353672

    • SHA256

      2acc6bafcbc97e42231fbb8ddf2ee73e284799ad9ad2c9b2da90b07d593a1b29

    • SHA512

      7af05e3a6dd17fafd6bb8aff6d0fbc9b281dd447aba766cccff95efa868dddd360a64e9456c0dc4d0a27c52039732fca93a43f67f1aa99144336b2b86fd76b83

    • SSDEEP

      12288:Nc//////qCHkdPLQ/oV6a1xEUQ4IfV8k9YGhGV3m8VWUY2TD9MAX+hmXhVITCFS:Nc//////JEdDyaDm4dahGV3hko1MAX+z

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks