General

  • Target

    ed67462cf6f0c83654684625cd226eb9_JaffaCakes118

  • Size

    22KB

  • Sample

    240920-mmxmkasakf

  • MD5

    ed67462cf6f0c83654684625cd226eb9

  • SHA1

    0763d27878b893327acb367103a389755774c2bf

  • SHA256

    24623fc27bbdb3c84cc144ed6612153f2ee0efb06da6017196531881b34c6256

  • SHA512

    9efff370297a613ffadecd757255b63e5c6c9295ad05c4dcc8bf5e15c680bda4a652e0f1ff7e9332890017621663bba404bcd61c9ff91bb44c7338116b812234

  • SSDEEP

    384:Scy1J3Vrq6+IYsijT2FzjyMIllvgYpSdzUNpouUEgmQGPSJjlz9:q1PWaaTmypGtdWpou+4KJjlz9

Malware Config

Targets

    • Target

      ed67462cf6f0c83654684625cd226eb9_JaffaCakes118

    • Size

      22KB

    • MD5

      ed67462cf6f0c83654684625cd226eb9

    • SHA1

      0763d27878b893327acb367103a389755774c2bf

    • SHA256

      24623fc27bbdb3c84cc144ed6612153f2ee0efb06da6017196531881b34c6256

    • SHA512

      9efff370297a613ffadecd757255b63e5c6c9295ad05c4dcc8bf5e15c680bda4a652e0f1ff7e9332890017621663bba404bcd61c9ff91bb44c7338116b812234

    • SSDEEP

      384:Scy1J3Vrq6+IYsijT2FzjyMIllvgYpSdzUNpouUEgmQGPSJjlz9:q1PWaaTmypGtdWpou+4KJjlz9

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks