General

  • Target

    ee02ef82034bceac64cbed4586b6c2c2_JaffaCakes118

  • Size

    746KB

  • Sample

    240920-t8t7wsxapq

  • MD5

    ee02ef82034bceac64cbed4586b6c2c2

  • SHA1

    18255b27d60538d62fd0d829097c0f4c8d881b15

  • SHA256

    b38ae977d0cc4a3a2f7566f217cd0a06df9c728276bd0dc10dcab1740d9d8701

  • SHA512

    d3a22c63897f72321ddfaa3e5a079b68453ae6f047f968496288d180b7421bdcad41bb54a9f1451242234a722f2033e8e42a2751f7c2411a4498a6d569a38ef6

  • SSDEEP

    12288:ic//////u+sihafNn5T0Uu1Pn6ai/xHqF5eknZWD149T2Oynb+yR/pRxcioYN3vZ:ic//////unigV5O1P6PJqFtM02bn3Rfj

Malware Config

Targets

    • Target

      ee02ef82034bceac64cbed4586b6c2c2_JaffaCakes118

    • Size

      746KB

    • MD5

      ee02ef82034bceac64cbed4586b6c2c2

    • SHA1

      18255b27d60538d62fd0d829097c0f4c8d881b15

    • SHA256

      b38ae977d0cc4a3a2f7566f217cd0a06df9c728276bd0dc10dcab1740d9d8701

    • SHA512

      d3a22c63897f72321ddfaa3e5a079b68453ae6f047f968496288d180b7421bdcad41bb54a9f1451242234a722f2033e8e42a2751f7c2411a4498a6d569a38ef6

    • SSDEEP

      12288:ic//////u+sihafNn5T0Uu1Pn6ai/xHqF5eknZWD149T2Oynb+yR/pRxcioYN3vZ:ic//////unigV5O1P6PJqFtM02bn3Rfj

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks