General

  • Target

    86a5b211ed5df34d2af13cb2e702f9db_JaffaCakes118

  • Size

    654KB

  • Sample

    241102-vzn5ys1cnm

  • MD5

    86a5b211ed5df34d2af13cb2e702f9db

  • SHA1

    b4da21e424c7f992e6dffe01d8fa2aa094c294b6

  • SHA256

    b9c17d202a2830348cb0dc387b92f6853f24282dc29cbcf92efa3c01e8953300

  • SHA512

    d7963a08acd2e8b77a130f17cdf0209b8f8da008b6d2732bacf4cd17b1879160ead7da54a818dc3cf981a5f205b97d6699d8c75ed6128110adb5d28f17e344bb

  • SSDEEP

    12288:baK6c3GiBwjNlW8CsLX4Jri00F3Z4mxxODqVTVOCZ:uK53GHPrNQmXdVTzZ

Malware Config

Targets

    • Target

      86a5b211ed5df34d2af13cb2e702f9db_JaffaCakes118

    • Size

      654KB

    • MD5

      86a5b211ed5df34d2af13cb2e702f9db

    • SHA1

      b4da21e424c7f992e6dffe01d8fa2aa094c294b6

    • SHA256

      b9c17d202a2830348cb0dc387b92f6853f24282dc29cbcf92efa3c01e8953300

    • SHA512

      d7963a08acd2e8b77a130f17cdf0209b8f8da008b6d2732bacf4cd17b1879160ead7da54a818dc3cf981a5f205b97d6699d8c75ed6128110adb5d28f17e344bb

    • SSDEEP

      12288:baK6c3GiBwjNlW8CsLX4Jri00F3Z4mxxODqVTVOCZ:uK53GHPrNQmXdVTzZ

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks