General

  • Target

    fc3a890a6eaff50baadcd138b93ab7ea_JaffaCakes118

  • Size

    447KB

  • Sample

    240928-ntw52swhkd

  • MD5

    fc3a890a6eaff50baadcd138b93ab7ea

  • SHA1

    55cc1f620228b33bf6e2df821bf7ad40a0261a91

  • SHA256

    225458a9d6b83e319dd5b043ea37abc0a29284800c83a3f27780f66aae6ca6e7

  • SHA512

    19ab85bec3ff9d129d56e9234a480abfc0f1bf1905e30e7d3ce00c3fb672042c91c4d846db5aef7d977a7023b86eb06306e470020f961c8a889cb1f42e0b3997

  • SSDEEP

    12288:XPzkWf6Jx0Ny7fzjWQNl/KfKWYsED/tE4iHmz3:X7VEx0NOfzyQNwfKTPWHW3

Malware Config

Targets

    • Target

      fc3a890a6eaff50baadcd138b93ab7ea_JaffaCakes118

    • Size

      447KB

    • MD5

      fc3a890a6eaff50baadcd138b93ab7ea

    • SHA1

      55cc1f620228b33bf6e2df821bf7ad40a0261a91

    • SHA256

      225458a9d6b83e319dd5b043ea37abc0a29284800c83a3f27780f66aae6ca6e7

    • SHA512

      19ab85bec3ff9d129d56e9234a480abfc0f1bf1905e30e7d3ce00c3fb672042c91c4d846db5aef7d977a7023b86eb06306e470020f961c8a889cb1f42e0b3997

    • SSDEEP

      12288:XPzkWf6Jx0Ny7fzjWQNl/KfKWYsED/tE4iHmz3:X7VEx0NOfzyQNwfKTPWHW3

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks