General

  • Target

    923a51fdf9897f3e8ed6c01f89d71d23_JaffaCakes118

  • Size

    408KB

  • Sample

    241124-dp3f6a1mhs

  • MD5

    923a51fdf9897f3e8ed6c01f89d71d23

  • SHA1

    dc3d586ac703b7d606bfddb7cb68996e40c1076c

  • SHA256

    7c5dd0542372b835c219118b499bf6632f3ddb0f11c24e453c76c96046518a6c

  • SHA512

    299a5355b66aeb503daba3399ba7b98a11b71fcce7de9c45bd8a95d4f32bdd66c2421a4c6bf817e2f2bc863c3a28f9f7e44bad9591661bbb8d8f30fcae85f652

  • SSDEEP

    12288:mrj57jHMXPoIsBrDHVeuLVv+MsxvyhVPE:mrj5XHlpBleEvh5

Malware Config

Targets

    • Target

      923a51fdf9897f3e8ed6c01f89d71d23_JaffaCakes118

    • Size

      408KB

    • MD5

      923a51fdf9897f3e8ed6c01f89d71d23

    • SHA1

      dc3d586ac703b7d606bfddb7cb68996e40c1076c

    • SHA256

      7c5dd0542372b835c219118b499bf6632f3ddb0f11c24e453c76c96046518a6c

    • SHA512

      299a5355b66aeb503daba3399ba7b98a11b71fcce7de9c45bd8a95d4f32bdd66c2421a4c6bf817e2f2bc863c3a28f9f7e44bad9591661bbb8d8f30fcae85f652

    • SSDEEP

      12288:mrj57jHMXPoIsBrDHVeuLVv+MsxvyhVPE:mrj5XHlpBleEvh5

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks