General

  • Target

    fd084fea3ce1c64ea5791f3926b4164f_JaffaCakes118

  • Size

    1.2MB

  • Sample

    240928-ymwaaawgpc

  • MD5

    fd084fea3ce1c64ea5791f3926b4164f

  • SHA1

    36d0409a6536b3d81d4ddbca52799ebcca8dd7b7

  • SHA256

    d5402f683e9bbba790a9f9fe5b21c99bb0c078a7f7dd8f6f12bf9bf392463de1

  • SHA512

    01c13ecff8bff71f4ef867ad73b908ea70e4ac019c4672b592c66ebbcd58bc5d659ee614a2ee9f8ec1027187e015300303b0ea75e8fe97a4e19dcb4b7b83d74d

  • SSDEEP

    24576:wuZA43AD8rwZlzmSP5f9gSQKojvDl7wOfB2XJseZ:wF4I8rwXxrpEvDlcOfMXie

Malware Config

Targets

    • Target

      fd084fea3ce1c64ea5791f3926b4164f_JaffaCakes118

    • Size

      1.2MB

    • MD5

      fd084fea3ce1c64ea5791f3926b4164f

    • SHA1

      36d0409a6536b3d81d4ddbca52799ebcca8dd7b7

    • SHA256

      d5402f683e9bbba790a9f9fe5b21c99bb0c078a7f7dd8f6f12bf9bf392463de1

    • SHA512

      01c13ecff8bff71f4ef867ad73b908ea70e4ac019c4672b592c66ebbcd58bc5d659ee614a2ee9f8ec1027187e015300303b0ea75e8fe97a4e19dcb4b7b83d74d

    • SSDEEP

      24576:wuZA43AD8rwZlzmSP5f9gSQKojvDl7wOfB2XJseZ:wF4I8rwXxrpEvDlcOfMXie

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks