General

  • Target

    a4718d36216d91a0701159e69393fb5d_JaffaCakes118

  • Size

    650KB

  • Sample

    241126-2dt8eazjeq

  • MD5

    a4718d36216d91a0701159e69393fb5d

  • SHA1

    5adce7ab01601a55faa563e8fca836ec124b0a4d

  • SHA256

    11e44da370ed0b1a2425658aaf0341c8eb52d498eb8105d6a8d56ba09cbb5ddd

  • SHA512

    8eeae6b30781357aa94e3c60e5b5517572d00a7d73211675ed6d63359860bfd49ffdd24469035e218ac9e47fbbeaf747188ee02506315a5a7cd980826ca99489

  • SSDEEP

    12288:Q9oqvZkxQZa/KQb5nrpiOS8uk1F3Z4Exx+bIapgCq4oGdkeQZJui:Q9rRk/JfvQEX+bIH4NkeNi

Malware Config

Targets

    • Target

      a4718d36216d91a0701159e69393fb5d_JaffaCakes118

    • Size

      650KB

    • MD5

      a4718d36216d91a0701159e69393fb5d

    • SHA1

      5adce7ab01601a55faa563e8fca836ec124b0a4d

    • SHA256

      11e44da370ed0b1a2425658aaf0341c8eb52d498eb8105d6a8d56ba09cbb5ddd

    • SHA512

      8eeae6b30781357aa94e3c60e5b5517572d00a7d73211675ed6d63359860bfd49ffdd24469035e218ac9e47fbbeaf747188ee02506315a5a7cd980826ca99489

    • SSDEEP

      12288:Q9oqvZkxQZa/KQb5nrpiOS8uk1F3Z4Exx+bIapgCq4oGdkeQZJui:Q9rRk/JfvQEX+bIH4NkeNi

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks