General

  • Target

    a3987303623a8257fbcd69bc81ca76e8_JaffaCakes118

  • Size

    752KB

  • Sample

    241126-xpke5avkcx

  • MD5

    a3987303623a8257fbcd69bc81ca76e8

  • SHA1

    343707df969f1c0a711e5f1c9076e26f72ba34b2

  • SHA256

    185c264ae68a33c7e3461d6e5a9e4cde3478a179ebbc9df284d9985d089f59d6

  • SHA512

    fbc5626117a306c57d2ab433379590bee0d8484e46ad032f118fbb9580adbb43ff1818abdeae4b1c7d5ce10e365ae7265762141789ae4c40622b5aea1cf9370b

  • SSDEEP

    12288:GbuIuNInUSJ429DSOWxTc7kSxbagAIlKswzR8W/yV+zLwEEsbkbB:pMD4ZpIRadIlKswzRXyV2Lr5od

Malware Config

Targets

    • Target

      a3987303623a8257fbcd69bc81ca76e8_JaffaCakes118

    • Size

      752KB

    • MD5

      a3987303623a8257fbcd69bc81ca76e8

    • SHA1

      343707df969f1c0a711e5f1c9076e26f72ba34b2

    • SHA256

      185c264ae68a33c7e3461d6e5a9e4cde3478a179ebbc9df284d9985d089f59d6

    • SHA512

      fbc5626117a306c57d2ab433379590bee0d8484e46ad032f118fbb9580adbb43ff1818abdeae4b1c7d5ce10e365ae7265762141789ae4c40622b5aea1cf9370b

    • SSDEEP

      12288:GbuIuNInUSJ429DSOWxTc7kSxbagAIlKswzR8W/yV+zLwEEsbkbB:pMD4ZpIRadIlKswzRXyV2Lr5od

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks