General

  • Target

    8e7063226caf4df5ab441264ab9e5db7_JaffaCakes118

  • Size

    656KB

  • Sample

    241104-bptsxazfql

  • MD5

    8e7063226caf4df5ab441264ab9e5db7

  • SHA1

    778adcb880a29fbb58a5300f5920125f19911214

  • SHA256

    6e545bd0b6ed0d36a4b036889a14f095e2d28e7feb10d346743fdbf0444a27aa

  • SHA512

    6416cff6dae9fa316134c69bfc206f6df49063f996d182e0aed11606489d2e5cc8e3fcf9466895af83b04f54dc50875533decaab451546d940aaec0917f426c0

  • SSDEEP

    12288:xb2jvEOb2U841MNTCccvdLuAF3Z4mxxF85XSKFypNNT:52jrbQMM9jyYAQmXFjbLT

Malware Config

Targets

    • Target

      8e7063226caf4df5ab441264ab9e5db7_JaffaCakes118

    • Size

      656KB

    • MD5

      8e7063226caf4df5ab441264ab9e5db7

    • SHA1

      778adcb880a29fbb58a5300f5920125f19911214

    • SHA256

      6e545bd0b6ed0d36a4b036889a14f095e2d28e7feb10d346743fdbf0444a27aa

    • SHA512

      6416cff6dae9fa316134c69bfc206f6df49063f996d182e0aed11606489d2e5cc8e3fcf9466895af83b04f54dc50875533decaab451546d940aaec0917f426c0

    • SSDEEP

      12288:xb2jvEOb2U841MNTCccvdLuAF3Z4mxxF85XSKFypNNT:52jrbQMM9jyYAQmXFjbLT

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks