General

  • Target

    8732032604ee5ead909868107c9b458d_JaffaCakes118

  • Size

    80KB

  • Sample

    241102-xw7h8swjbp

  • MD5

    8732032604ee5ead909868107c9b458d

  • SHA1

    f234b11af3922fa4507c0f418e6a0372cbf71865

  • SHA256

    1ecf5cf3c7982189401caf78de7bca1d3b78097dd3106073fb739ca388dc5e1a

  • SHA512

    d911d01c04b5dd9343bf0837a09bf0cb4792d82566ba70e7cb02d0e7500265c573cd41e4d14d7400244e6fae22e35846463e1494f9d8c36bc52ee4362b253a90

  • SSDEEP

    1536:ngmNH6mNQrbkonjafqfRvFNm9FMfmotq8FXDeUHosEGBN:gQ6mN+bkgjQiRS9FOHZFzeUHodGL

Malware Config

Targets

    • Target

      8732032604ee5ead909868107c9b458d_JaffaCakes118

    • Size

      80KB

    • MD5

      8732032604ee5ead909868107c9b458d

    • SHA1

      f234b11af3922fa4507c0f418e6a0372cbf71865

    • SHA256

      1ecf5cf3c7982189401caf78de7bca1d3b78097dd3106073fb739ca388dc5e1a

    • SHA512

      d911d01c04b5dd9343bf0837a09bf0cb4792d82566ba70e7cb02d0e7500265c573cd41e4d14d7400244e6fae22e35846463e1494f9d8c36bc52ee4362b253a90

    • SSDEEP

      1536:ngmNH6mNQrbkonjafqfRvFNm9FMfmotq8FXDeUHosEGBN:gQ6mN+bkgjQiRS9FOHZFzeUHodGL

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks