General

  • Target

    e5b853863432a5e68e23ecb7ca79aa1b_JaffaCakes118

  • Size

    744KB

  • Sample

    240916-2xnjzathpr

  • MD5

    e5b853863432a5e68e23ecb7ca79aa1b

  • SHA1

    8cb2c0014e73c89e7623f16a919c8c28fb2a77d8

  • SHA256

    2d64ad27cc1d36e12b079ac5d7b399f284039343e4e9ff2ee74ebe321603863b

  • SHA512

    f3ecd884809a0e2555483850f61e71d276e8912bea686ce7d53764ada75137ee54a2015fb0022bb1bde6eec31def68962c3c652a4b25ee03bc4ec8edd7d1b673

  • SSDEEP

    12288:YJc//////VFmKQhBGKbQlApXwh4JiRdF00dn8sOLljTnQvybFqI6IlhXwWSQ:6c//////Z+7lZ1Cd20/OLlQabFEILwWz

Malware Config

Targets

    • Target

      e5b853863432a5e68e23ecb7ca79aa1b_JaffaCakes118

    • Size

      744KB

    • MD5

      e5b853863432a5e68e23ecb7ca79aa1b

    • SHA1

      8cb2c0014e73c89e7623f16a919c8c28fb2a77d8

    • SHA256

      2d64ad27cc1d36e12b079ac5d7b399f284039343e4e9ff2ee74ebe321603863b

    • SHA512

      f3ecd884809a0e2555483850f61e71d276e8912bea686ce7d53764ada75137ee54a2015fb0022bb1bde6eec31def68962c3c652a4b25ee03bc4ec8edd7d1b673

    • SSDEEP

      12288:YJc//////VFmKQhBGKbQlApXwh4JiRdF00dn8sOLljTnQvybFqI6IlhXwWSQ:6c//////Z+7lZ1Cd20/OLlQabFEILwWz

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks