General

  • Target

    e5a4eacf9df6a96d068520dafc94d7b5_JaffaCakes118

  • Size

    10KB

  • Sample

    240916-1yy7esscln

  • MD5

    e5a4eacf9df6a96d068520dafc94d7b5

  • SHA1

    d9f666021c2148648f5f0eda138a6ac26777f9b4

  • SHA256

    765a3ee635dac9768667346592434404a355fc6c631d85bbc88fe43857820416

  • SHA512

    b4fe4ab4c748e1a42a9f4a25581441a9e0341ab3781b9549f4ba15cbc50cbcd2b0e9878b7532a7ebb57bdef13e85fc6102652f4e989d0bfef9d98028e97f7d1a

  • SSDEEP

    192:6mPdGmyd86YfBHAHh7d8NKwr52876nfq2UxXqqjOTj5nTP3N:JPdGmMYfcs6nfLUx9OT1TP3N

Malware Config

Targets

    • Target

      e5a4eacf9df6a96d068520dafc94d7b5_JaffaCakes118

    • Size

      10KB

    • MD5

      e5a4eacf9df6a96d068520dafc94d7b5

    • SHA1

      d9f666021c2148648f5f0eda138a6ac26777f9b4

    • SHA256

      765a3ee635dac9768667346592434404a355fc6c631d85bbc88fe43857820416

    • SHA512

      b4fe4ab4c748e1a42a9f4a25581441a9e0341ab3781b9549f4ba15cbc50cbcd2b0e9878b7532a7ebb57bdef13e85fc6102652f4e989d0bfef9d98028e97f7d1a

    • SSDEEP

      192:6mPdGmyd86YfBHAHh7d8NKwr52876nfq2UxXqqjOTj5nTP3N:JPdGmMYfcs6nfLUx9OT1TP3N

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks