General

  • Target

    e7fd6329143532ea0bebe005412dd0e4_JaffaCakes118

  • Size

    695KB

  • Sample

    240918-avwc9ashld

  • MD5

    e7fd6329143532ea0bebe005412dd0e4

  • SHA1

    14f9cc314ea92887e1444e9d530356bf3f9736a7

  • SHA256

    60fcc429efb0da6f06194ad25a8127c7ab74219a20a3e140f6b4e356090daba1

  • SHA512

    11cbe66f8d53dd461748f8b0305cf27d2fe22ba5543a76eb90f7df3a37f405b790fda7992859c1ad5f6cf5dd32b98925044a19b98505bfdcb47ffd4907d933be

  • SSDEEP

    12288:DDNkFa5fF7RTX979xwJyTW7DsVpClkJXNF9QPC14kMabunqQFFmFQei3D95BSGXr:DJ+gF1tTyyTW7Cp/EC14km+FHiZqAjOC

Malware Config

Targets

    • Target

      e7fd6329143532ea0bebe005412dd0e4_JaffaCakes118

    • Size

      695KB

    • MD5

      e7fd6329143532ea0bebe005412dd0e4

    • SHA1

      14f9cc314ea92887e1444e9d530356bf3f9736a7

    • SHA256

      60fcc429efb0da6f06194ad25a8127c7ab74219a20a3e140f6b4e356090daba1

    • SHA512

      11cbe66f8d53dd461748f8b0305cf27d2fe22ba5543a76eb90f7df3a37f405b790fda7992859c1ad5f6cf5dd32b98925044a19b98505bfdcb47ffd4907d933be

    • SSDEEP

      12288:DDNkFa5fF7RTX979xwJyTW7DsVpClkJXNF9QPC14kMabunqQFFmFQei3D95BSGXr:DJ+gF1tTyyTW7Cp/EC14km+FHiZqAjOC

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks