General

  • Target

    9c586e213fd3d9e7260dc1e727260402_JaffaCakes118

  • Size

    64KB

  • Sample

    241125-stf62szkfr

  • MD5

    9c586e213fd3d9e7260dc1e727260402

  • SHA1

    80a55d1c5f1e1072c5d779fd8e20cad71f24be74

  • SHA256

    01ca3d2021e1df03ebed72e1c2542d519281c0b23faef8219f110d6e1b6c8969

  • SHA512

    fe4327727756e07956eee61b633a1cf6d309f3851e1cfa871009028017f2e97dc9eb0646c2c0f2a769272a8ba88280bba04ced18428d4f15a60351d989759956

  • SSDEEP

    1536:TOCaqMQQFOKk9alikAplkV/hIb8mWy58tpIzUgtsc:LaJFYsrtmWy58wzfsc

Malware Config

Targets

    • Target

      9c586e213fd3d9e7260dc1e727260402_JaffaCakes118

    • Size

      64KB

    • MD5

      9c586e213fd3d9e7260dc1e727260402

    • SHA1

      80a55d1c5f1e1072c5d779fd8e20cad71f24be74

    • SHA256

      01ca3d2021e1df03ebed72e1c2542d519281c0b23faef8219f110d6e1b6c8969

    • SHA512

      fe4327727756e07956eee61b633a1cf6d309f3851e1cfa871009028017f2e97dc9eb0646c2c0f2a769272a8ba88280bba04ced18428d4f15a60351d989759956

    • SSDEEP

      1536:TOCaqMQQFOKk9alikAplkV/hIb8mWy58tpIzUgtsc:LaJFYsrtmWy58wzfsc

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks