General

  • Target

    e6de2bdeea2f1c8721ef78d3960c70c7_JaffaCakes118

  • Size

    554KB

  • Sample

    240917-p6jwxstenh

  • MD5

    e6de2bdeea2f1c8721ef78d3960c70c7

  • SHA1

    56ab556eed9657fa54140c646cd3f0ee9ab2fee2

  • SHA256

    bdfc7861cfcde52b6a99fdae26f8fc2a69adc91f6dab2b0790f3d63fd8321048

  • SHA512

    8b56720ba6ad993d1781348778a73a28acb80cf3f5f4250ae3f30b364d0788cefeccd34e701a6e40518bdf380b8033191ef01a12f1e70df99d983f3400ed9cff

  • SSDEEP

    6144:4p2ud3CIko0UuLpkqkfPcvgKW4ugtTHI1ZNpWLJAhS15M0cg3dn:4gOSZUckzKvNtbsPpGIaG0cg3B

Malware Config

Targets

    • Target

      e6de2bdeea2f1c8721ef78d3960c70c7_JaffaCakes118

    • Size

      554KB

    • MD5

      e6de2bdeea2f1c8721ef78d3960c70c7

    • SHA1

      56ab556eed9657fa54140c646cd3f0ee9ab2fee2

    • SHA256

      bdfc7861cfcde52b6a99fdae26f8fc2a69adc91f6dab2b0790f3d63fd8321048

    • SHA512

      8b56720ba6ad993d1781348778a73a28acb80cf3f5f4250ae3f30b364d0788cefeccd34e701a6e40518bdf380b8033191ef01a12f1e70df99d983f3400ed9cff

    • SSDEEP

      6144:4p2ud3CIko0UuLpkqkfPcvgKW4ugtTHI1ZNpWLJAhS15M0cg3dn:4gOSZUckzKvNtbsPpGIaG0cg3B

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks