General

  • Target

    f8ef768ef66677ddf050a1402fc11907_JaffaCakes118

  • Size

    506KB

  • Sample

    240926-wqh31stcla

  • MD5

    f8ef768ef66677ddf050a1402fc11907

  • SHA1

    350861800c1057d06c9266622b6a056deb5b6ab0

  • SHA256

    7b79e4eff59329a286ebaa9cd744706f4660a1c714ff95c33d49a4016fe508b0

  • SHA512

    9aeb7b8708c023e215f5f35028116c7f07f7886fbe04a2446c205a13450d6d8922654c88f22029e6e9a85e7d130b16351795542cf489f4a7cc057cb27312d1b3

  • SSDEEP

    12288:NB3BTs1bzWhYCg9pQImWH9pN480Fq9KeS:Nfskw9aImWdDf9Ke

Malware Config

Targets

    • Target

      f8ef768ef66677ddf050a1402fc11907_JaffaCakes118

    • Size

      506KB

    • MD5

      f8ef768ef66677ddf050a1402fc11907

    • SHA1

      350861800c1057d06c9266622b6a056deb5b6ab0

    • SHA256

      7b79e4eff59329a286ebaa9cd744706f4660a1c714ff95c33d49a4016fe508b0

    • SHA512

      9aeb7b8708c023e215f5f35028116c7f07f7886fbe04a2446c205a13450d6d8922654c88f22029e6e9a85e7d130b16351795542cf489f4a7cc057cb27312d1b3

    • SSDEEP

      12288:NB3BTs1bzWhYCg9pQImWH9pN480Fq9KeS:Nfskw9aImWdDf9Ke

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks