General

  • Target

    9e38d22788d64564b68ae76430ab890d_JaffaCakes118

  • Size

    49KB

  • Sample

    241125-188hvayrfx

  • MD5

    9e38d22788d64564b68ae76430ab890d

  • SHA1

    3a8b0ebf46769a59fc5c213bda14b4a262fe0820

  • SHA256

    bff9af2807acf7ddfadb1b521ae8ff3dcab1e23db041dd8e923680531403aef1

  • SHA512

    71ce433d44627dc8d45aa24afba04a797dfad4b69ee890119f1c789aaace438fe178c872263918a8300ea4bc197c1411ed72ddd9e0acfbf4872c1b2f04770176

  • SSDEEP

    768:TRVNq/9pkEAj2KMWj6kOzeQ5wdSqkLS/Kk6zfwc2feWr/5S3PTX9boSP:TLNq/8ECJj6kZSAHcL3rXh

Malware Config

Targets

    • Target

      9e38d22788d64564b68ae76430ab890d_JaffaCakes118

    • Size

      49KB

    • MD5

      9e38d22788d64564b68ae76430ab890d

    • SHA1

      3a8b0ebf46769a59fc5c213bda14b4a262fe0820

    • SHA256

      bff9af2807acf7ddfadb1b521ae8ff3dcab1e23db041dd8e923680531403aef1

    • SHA512

      71ce433d44627dc8d45aa24afba04a797dfad4b69ee890119f1c789aaace438fe178c872263918a8300ea4bc197c1411ed72ddd9e0acfbf4872c1b2f04770176

    • SSDEEP

      768:TRVNq/9pkEAj2KMWj6kOzeQ5wdSqkLS/Kk6zfwc2feWr/5S3PTX9boSP:TLNq/8ECJj6kZSAHcL3rXh

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks