General

  • Target

    8829b5c60f539fa0aa9c671cbb40dadb_JaffaCakes118

  • Size

    721KB

  • Sample

    241102-2f9e4sxdpa

  • MD5

    8829b5c60f539fa0aa9c671cbb40dadb

  • SHA1

    eebd0c174c4aa318637c8a97b5b2ac7be686a954

  • SHA256

    c00df964658bcaa5b56857cf74adfe899a0347979a38b7d0fad46bacd13d06fc

  • SHA512

    f6555e96f766d46e624223d12026ca9d33265b2e1b8f278110ea390717f208a46cec33fe21c52fb5156049c398a064e9dcc9ee521e776af1639fb6f9a58c391d

  • SSDEEP

    12288:Fc//////rMz86mM/itg5lIQkkjXTz74FeCHVv53lppo:Fc//////rW86stQ9TTf4sW953Xpo

Malware Config

Targets

    • Target

      8829b5c60f539fa0aa9c671cbb40dadb_JaffaCakes118

    • Size

      721KB

    • MD5

      8829b5c60f539fa0aa9c671cbb40dadb

    • SHA1

      eebd0c174c4aa318637c8a97b5b2ac7be686a954

    • SHA256

      c00df964658bcaa5b56857cf74adfe899a0347979a38b7d0fad46bacd13d06fc

    • SHA512

      f6555e96f766d46e624223d12026ca9d33265b2e1b8f278110ea390717f208a46cec33fe21c52fb5156049c398a064e9dcc9ee521e776af1639fb6f9a58c391d

    • SSDEEP

      12288:Fc//////rMz86mM/itg5lIQkkjXTz74FeCHVv53lppo:Fc//////rW86stQ9TTf4sW953Xpo

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks