General

  • Target

    e68f3efd5ebcbc21d8d73cd9d5358e85_JaffaCakes118

  • Size

    735KB

  • Sample

    240917-lxyryaxapj

  • MD5

    e68f3efd5ebcbc21d8d73cd9d5358e85

  • SHA1

    193c5a0973ca48c30348144bbe8462f6cccdc17b

  • SHA256

    9edec74491e7e7be8b39853c34cac3fb84e247bcac3ce4b7ebefc75087407bfd

  • SHA512

    08fbb6dca35670bef23497eb86aaf659c3f5d30dd5835ef39ce9ce266c44cac5d231974034d2a5d7e3a84fb455b330b5f95f065ad21803b6a16394b58048fb9c

  • SSDEEP

    12288:uhc//////HkPYyIJujiIH13mcwtbkElgCTED2W9isRyYYxO3HQ0HTxOVc2qH0XZP:Uc//////hIiq2Xtb3PYgs53BHFO62pXZ

Malware Config

Targets

    • Target

      e68f3efd5ebcbc21d8d73cd9d5358e85_JaffaCakes118

    • Size

      735KB

    • MD5

      e68f3efd5ebcbc21d8d73cd9d5358e85

    • SHA1

      193c5a0973ca48c30348144bbe8462f6cccdc17b

    • SHA256

      9edec74491e7e7be8b39853c34cac3fb84e247bcac3ce4b7ebefc75087407bfd

    • SHA512

      08fbb6dca35670bef23497eb86aaf659c3f5d30dd5835ef39ce9ce266c44cac5d231974034d2a5d7e3a84fb455b330b5f95f065ad21803b6a16394b58048fb9c

    • SSDEEP

      12288:uhc//////HkPYyIJujiIH13mcwtbkElgCTED2W9isRyYYxO3HQ0HTxOVc2qH0XZP:Uc//////hIiq2Xtb3PYgs53BHFO62pXZ

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks