General

  • Target

    f75a95e4d273d4987b79ae919a4eac35_JaffaCakes118

  • Size

    682KB

  • Sample

    240926-cwa5tavenb

  • MD5

    f75a95e4d273d4987b79ae919a4eac35

  • SHA1

    07e833d1d904594df927bfba16d7adb7561e892f

  • SHA256

    028cf6b9c581f34d1a2dd559c5d5ee2ca18f5c382d9e3cd95dcf77fd05a377b9

  • SHA512

    1bb0a8e733953071220c688239736f816068bec48a96c31d1d11dc2d398a57d834345260265d447c518bf0656b28689208f010105903dc27b70c432717e751e8

  • SSDEEP

    12288:2gdLmS1B2u2aNw9FQeQSzm6tbwqCsGdAdqwJ4g+KTGy:nhmSZ2aNw9FRy6VfUO+KTb

Malware Config

Targets

    • Target

      f75a95e4d273d4987b79ae919a4eac35_JaffaCakes118

    • Size

      682KB

    • MD5

      f75a95e4d273d4987b79ae919a4eac35

    • SHA1

      07e833d1d904594df927bfba16d7adb7561e892f

    • SHA256

      028cf6b9c581f34d1a2dd559c5d5ee2ca18f5c382d9e3cd95dcf77fd05a377b9

    • SHA512

      1bb0a8e733953071220c688239736f816068bec48a96c31d1d11dc2d398a57d834345260265d447c518bf0656b28689208f010105903dc27b70c432717e751e8

    • SSDEEP

      12288:2gdLmS1B2u2aNw9FQeQSzm6tbwqCsGdAdqwJ4g+KTGy:nhmSZ2aNw9FRy6VfUO+KTb

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks