General

  • Target

    eae0757de58a707bcd1bb1a9c16c2407_JaffaCakes118

  • Size

    394KB

  • Sample

    240919-jk812ayann

  • MD5

    eae0757de58a707bcd1bb1a9c16c2407

  • SHA1

    352337b6996575a3903ee1bec17e9c9c90bd341a

  • SHA256

    fb11abdace9b4a52429a27f05a15b01ac5128b70ac5630b8a621321ab1e546a9

  • SHA512

    aec095ccbccd35c189b6143926c2b7acc76e85dcec7db61d3fc84240b7459edc308f55a2550c220d7fdca8ae162beeffec88241d67c30a8d26cabc29edf2e511

  • SSDEEP

    12288:6Mmv7nj3di3UwG6VMYjAPiYk/ICZeMmUa:qDI3zG6VMYcLuICkM

Malware Config

Targets

    • Target

      eae0757de58a707bcd1bb1a9c16c2407_JaffaCakes118

    • Size

      394KB

    • MD5

      eae0757de58a707bcd1bb1a9c16c2407

    • SHA1

      352337b6996575a3903ee1bec17e9c9c90bd341a

    • SHA256

      fb11abdace9b4a52429a27f05a15b01ac5128b70ac5630b8a621321ab1e546a9

    • SHA512

      aec095ccbccd35c189b6143926c2b7acc76e85dcec7db61d3fc84240b7459edc308f55a2550c220d7fdca8ae162beeffec88241d67c30a8d26cabc29edf2e511

    • SSDEEP

      12288:6Mmv7nj3di3UwG6VMYjAPiYk/ICZeMmUa:qDI3zG6VMYcLuICkM

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks