General

  • Target

    fa8fc3cbc7e78e80dd816c8375e95090_JaffaCakes118

  • Size

    247KB

  • Sample

    240927-rmtccsyfqf

  • MD5

    fa8fc3cbc7e78e80dd816c8375e95090

  • SHA1

    8c7d71d10b0dbba1371f23a610e0a73af4ba46fd

  • SHA256

    354403d611159d993d6b27632766c20f2523748f7451f874e1be71132d694db8

  • SHA512

    ba5916aeb4b1999f9a4f87328eae786e365888833677e43a78666e4e57915e6e6d32698433ddb7510d7ce5ab23e021dd46b92fff1ce3dd8cc445ae63f286ea56

  • SSDEEP

    6144:E1t8fYl9NxyMIfr03eMuu5en1D8ol7vr+SHpw:6/5Wr8uP1DbtCSa

Malware Config

Targets

    • Target

      fa8fc3cbc7e78e80dd816c8375e95090_JaffaCakes118

    • Size

      247KB

    • MD5

      fa8fc3cbc7e78e80dd816c8375e95090

    • SHA1

      8c7d71d10b0dbba1371f23a610e0a73af4ba46fd

    • SHA256

      354403d611159d993d6b27632766c20f2523748f7451f874e1be71132d694db8

    • SHA512

      ba5916aeb4b1999f9a4f87328eae786e365888833677e43a78666e4e57915e6e6d32698433ddb7510d7ce5ab23e021dd46b92fff1ce3dd8cc445ae63f286ea56

    • SSDEEP

      6144:E1t8fYl9NxyMIfr03eMuu5en1D8ol7vr+SHpw:6/5Wr8uP1DbtCSa

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks