General

  • Target

    ec091e865d60694b260455ec1edac80b_JaffaCakes118

  • Size

    36KB

  • Sample

    240919-x5ngqawdke

  • MD5

    ec091e865d60694b260455ec1edac80b

  • SHA1

    b45803a6b63a0749913ddb9c88331aaeab9f251a

  • SHA256

    644bc927f7dc7ec791e9f2a8f2b4f664f6ff210c87d8a7f9262da59125350332

  • SHA512

    fa88cb26dc300a5a0249b384148cba156522073954d9fc9ee064afc1f6cd4f1778cba2b1c39204b60cebb84552ca06071736066fade147c1b35539289fad49cc

  • SSDEEP

    768:SJT4n0+DN8zjxig+6xt+SOduIdaXKxLmGQj1DIjcA:qUn13H8zTj1DXA

Malware Config

Targets

    • Target

      ec091e865d60694b260455ec1edac80b_JaffaCakes118

    • Size

      36KB

    • MD5

      ec091e865d60694b260455ec1edac80b

    • SHA1

      b45803a6b63a0749913ddb9c88331aaeab9f251a

    • SHA256

      644bc927f7dc7ec791e9f2a8f2b4f664f6ff210c87d8a7f9262da59125350332

    • SHA512

      fa88cb26dc300a5a0249b384148cba156522073954d9fc9ee064afc1f6cd4f1778cba2b1c39204b60cebb84552ca06071736066fade147c1b35539289fad49cc

    • SSDEEP

      768:SJT4n0+DN8zjxig+6xt+SOduIdaXKxLmGQj1DIjcA:qUn13H8zTj1DXA

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks