General

  • Target

    f91bb21da3ff22465b5dbd35dbc15cac_JaffaCakes118

  • Size

    2.3MB

  • Sample

    240926-ymw7ksvfnp

  • MD5

    f91bb21da3ff22465b5dbd35dbc15cac

  • SHA1

    eb329e451d34f9b5f3b80be20e395d1073d5db61

  • SHA256

    8ab9835526824935ac689c807bc8a274e963d11bc8ec0fd0837b34a43f47d7e8

  • SHA512

    efeadac100d793b5a547f3ddfbc0b7375422ed2bd94e962710fbed8393d5830f08c45b22d0405a93a32ed187f24d46e0a76b519d29bd69a9a959bba8a8761c35

  • SSDEEP

    49152:D0foBvPfSOMW/bNmna5TxkTiBpCKaYj65aBOJ7DyVbykGex:ZvZ/bNmqXBdaYvOpy5ykGK

Malware Config

Targets

    • Target

      f91bb21da3ff22465b5dbd35dbc15cac_JaffaCakes118

    • Size

      2.3MB

    • MD5

      f91bb21da3ff22465b5dbd35dbc15cac

    • SHA1

      eb329e451d34f9b5f3b80be20e395d1073d5db61

    • SHA256

      8ab9835526824935ac689c807bc8a274e963d11bc8ec0fd0837b34a43f47d7e8

    • SHA512

      efeadac100d793b5a547f3ddfbc0b7375422ed2bd94e962710fbed8393d5830f08c45b22d0405a93a32ed187f24d46e0a76b519d29bd69a9a959bba8a8761c35

    • SSDEEP

      49152:D0foBvPfSOMW/bNmna5TxkTiBpCKaYj65aBOJ7DyVbykGex:ZvZ/bNmqXBdaYvOpy5ykGK

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks