General

  • Target

    b14c410d0c62d099921fa070ba05221e_JaffaCakes118

  • Size

    12KB

  • Sample

    241129-pvq6vszraj

  • MD5

    b14c410d0c62d099921fa070ba05221e

  • SHA1

    3327d02f995a00d1dac9b9192df1fdf1e2a7f156

  • SHA256

    a714b4778b9a3412e751caccd2ae02c93bf0f467ca0ed7ca2d1080cf87d608ee

  • SHA512

    e3d3c3bb0cf118c364f5bcafca2e9423d5ba63b9826b45958a9f9dcf58b0402a0d90f34613c009d0e78d3ed7d998a1ec4890fdb3f743dd1f1eef3ebf465253e9

  • SSDEEP

    192:nP2/9vuLURfOX3SCF82tV6ey2SnkoaoIS6Aa4E:k9mRSCF82EkoaoP6Ak

Malware Config

Targets

    • Target

      b14c410d0c62d099921fa070ba05221e_JaffaCakes118

    • Size

      12KB

    • MD5

      b14c410d0c62d099921fa070ba05221e

    • SHA1

      3327d02f995a00d1dac9b9192df1fdf1e2a7f156

    • SHA256

      a714b4778b9a3412e751caccd2ae02c93bf0f467ca0ed7ca2d1080cf87d608ee

    • SHA512

      e3d3c3bb0cf118c364f5bcafca2e9423d5ba63b9826b45958a9f9dcf58b0402a0d90f34613c009d0e78d3ed7d998a1ec4890fdb3f743dd1f1eef3ebf465253e9

    • SSDEEP

      192:nP2/9vuLURfOX3SCF82tV6ey2SnkoaoIS6Aa4E:k9mRSCF82EkoaoP6Ak

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks