General

  • Target

    f6a0e1e005aa5078dcee3d2096064d36_JaffaCakes118

  • Size

    402KB

  • Sample

    240925-xa4v8athke

  • MD5

    f6a0e1e005aa5078dcee3d2096064d36

  • SHA1

    d6d2a4d0658897034ad99dd6bdb0c31e43f0a7e5

  • SHA256

    b1a699ff4608a658fcf699fee733f9216cce06ba58e66d0a93dafde657a128b7

  • SHA512

    9f23ac9a97875346ee8bacddc58231ef2bab82cade763bc8bd4b4f61b39560c28d100879c8f3ec6b8a92144a3a42b772de628ed4ba36f9303b757cd399c933fb

  • SSDEEP

    12288:YKsO4lcbdjFPqf6p6FJ6o2nTloHsvfO9Z+mVSrdweDvDWnXoseJO:YKsSd5CfdFJv2poMHO9wrqJXR

Malware Config

Targets

    • Target

      f6a0e1e005aa5078dcee3d2096064d36_JaffaCakes118

    • Size

      402KB

    • MD5

      f6a0e1e005aa5078dcee3d2096064d36

    • SHA1

      d6d2a4d0658897034ad99dd6bdb0c31e43f0a7e5

    • SHA256

      b1a699ff4608a658fcf699fee733f9216cce06ba58e66d0a93dafde657a128b7

    • SHA512

      9f23ac9a97875346ee8bacddc58231ef2bab82cade763bc8bd4b4f61b39560c28d100879c8f3ec6b8a92144a3a42b772de628ed4ba36f9303b757cd399c933fb

    • SSDEEP

      12288:YKsO4lcbdjFPqf6p6FJ6o2nTloHsvfO9Z+mVSrdweDvDWnXoseJO:YKsSd5CfdFJv2poMHO9wrqJXR

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks