General

  • Target

    fe7067ceb7e8a73cd9dbd160c7fcf195_JaffaCakes118

  • Size

    66KB

  • Sample

    240929-nnp5jssfjk

  • MD5

    fe7067ceb7e8a73cd9dbd160c7fcf195

  • SHA1

    f89aa9f526b17ac6841f3494306369e1a126aaa6

  • SHA256

    5961b803ff718026aed6052166d724fdd48d063d380fe016c1962e14e0bb0a46

  • SHA512

    167745eca6d4b7a07391a9b3d1ad61c167288debbc719a3c30a2effb852d18e65d508da78db21f0820917add78c2301bc26801504e3aa6b2f3b9c4ad70e0dd0d

  • SSDEEP

    1536:ynpiCY1ZvxOc9RXGCXGB5wBuOOMSQVKYoFwUnfBPbPy3V0UNYsM6l:AqPccXzqIvmOo1n5jP5qYsx

Malware Config

Targets

    • Target

      fe7067ceb7e8a73cd9dbd160c7fcf195_JaffaCakes118

    • Size

      66KB

    • MD5

      fe7067ceb7e8a73cd9dbd160c7fcf195

    • SHA1

      f89aa9f526b17ac6841f3494306369e1a126aaa6

    • SHA256

      5961b803ff718026aed6052166d724fdd48d063d380fe016c1962e14e0bb0a46

    • SHA512

      167745eca6d4b7a07391a9b3d1ad61c167288debbc719a3c30a2effb852d18e65d508da78db21f0820917add78c2301bc26801504e3aa6b2f3b9c4ad70e0dd0d

    • SSDEEP

      1536:ynpiCY1ZvxOc9RXGCXGB5wBuOOMSQVKYoFwUnfBPbPy3V0UNYsM6l:AqPccXzqIvmOo1n5jP5qYsx

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks