General

  • Target

    ed0133ad9f3b391808812eba802cbfda_JaffaCakes118

  • Size

    262KB

  • Sample

    240920-g4btjashql

  • MD5

    ed0133ad9f3b391808812eba802cbfda

  • SHA1

    147295047fe53facf4376fccd8c63322bd2a609d

  • SHA256

    6e62ee6efbbc28df21db6a3ce1504a54f5d25dc7f948e209aa3c43f58b884989

  • SHA512

    09e47d4c9c3f64c483812aa3bad96528b602fa1e82c1483e4d35135daaac8d15a680bb7ae96b0f2ec62367df5bbdabab3207a653f2e44b50f8e8afdd74ba2377

  • SSDEEP

    6144:o0iKbTXzbHWfCoPuPpfV/4KgK3maLZwcMkXPxm9tn:o0nTv2fnuRfVQLKWaOcD8tn

Malware Config

Targets

    • Target

      ed0133ad9f3b391808812eba802cbfda_JaffaCakes118

    • Size

      262KB

    • MD5

      ed0133ad9f3b391808812eba802cbfda

    • SHA1

      147295047fe53facf4376fccd8c63322bd2a609d

    • SHA256

      6e62ee6efbbc28df21db6a3ce1504a54f5d25dc7f948e209aa3c43f58b884989

    • SHA512

      09e47d4c9c3f64c483812aa3bad96528b602fa1e82c1483e4d35135daaac8d15a680bb7ae96b0f2ec62367df5bbdabab3207a653f2e44b50f8e8afdd74ba2377

    • SSDEEP

      6144:o0iKbTXzbHWfCoPuPpfV/4KgK3maLZwcMkXPxm9tn:o0nTv2fnuRfVQLKWaOcD8tn

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.