General

  • Target

    b4875c4c07ca9b2c0f2bd07d0ff56771_JaffaCakes118

  • Size

    97KB

  • Sample

    241130-dtdctstpbn

  • MD5

    b4875c4c07ca9b2c0f2bd07d0ff56771

  • SHA1

    c033c1ecd14d2d65822d04d6b52c413a64a4f759

  • SHA256

    e43e8e773fecf5309e8b33265dd48393c59886a88e9abb69a8d707770340ae61

  • SHA512

    04cc5623290b88545771583e3a14a32de6cf419c5a2db15e29b5e15cf15aafa3151ec389ce35419e60a6b8fc31bbc3fea2073ca6cf51a2930b20e4b839386efe

  • SSDEEP

    3072:ipAsIbe+j685MchbAxWs4YABH+N+Fp/4lUjQbb:ipAsIbDxM60xWs4YAQNejQn

Malware Config

Targets

    • Target

      b4875c4c07ca9b2c0f2bd07d0ff56771_JaffaCakes118

    • Size

      97KB

    • MD5

      b4875c4c07ca9b2c0f2bd07d0ff56771

    • SHA1

      c033c1ecd14d2d65822d04d6b52c413a64a4f759

    • SHA256

      e43e8e773fecf5309e8b33265dd48393c59886a88e9abb69a8d707770340ae61

    • SHA512

      04cc5623290b88545771583e3a14a32de6cf419c5a2db15e29b5e15cf15aafa3151ec389ce35419e60a6b8fc31bbc3fea2073ca6cf51a2930b20e4b839386efe

    • SSDEEP

      3072:ipAsIbe+j685MchbAxWs4YABH+N+Fp/4lUjQbb:ipAsIbDxM60xWs4YAQNejQn

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks