General

  • Target

    b4d46663e367a4c2e33bf1ad19455649_JaffaCakes118

  • Size

    374KB

  • Sample

    241130-fbc1fssqf1

  • MD5

    b4d46663e367a4c2e33bf1ad19455649

  • SHA1

    b27633d806ee8c17c9b7b8bac32fd5d0dba763a9

  • SHA256

    c10b7a4ace89b8b2e90b304a8a9947f896bb34c0aec099f22086d3a552b8fe15

  • SHA512

    98b0e9fde31ef0cab83f409693dd7cdd7ed7ecdc53d469a606d58c56d9fa194467df63d550101331d1511bfaf73ec9923700c854038fddeee2b5d20635ec0343

  • SSDEEP

    6144:PXUkXbIZIq83/yVskp5Mq6OwbI8YVn8YU3gg6j8VL4VVcgvc/onfzrwOLDtme0X6:s4IZa/y9ghOw0lZU3gb4SmwcgfzLDT0q

Malware Config

Targets

    • Target

      b4d46663e367a4c2e33bf1ad19455649_JaffaCakes118

    • Size

      374KB

    • MD5

      b4d46663e367a4c2e33bf1ad19455649

    • SHA1

      b27633d806ee8c17c9b7b8bac32fd5d0dba763a9

    • SHA256

      c10b7a4ace89b8b2e90b304a8a9947f896bb34c0aec099f22086d3a552b8fe15

    • SHA512

      98b0e9fde31ef0cab83f409693dd7cdd7ed7ecdc53d469a606d58c56d9fa194467df63d550101331d1511bfaf73ec9923700c854038fddeee2b5d20635ec0343

    • SSDEEP

      6144:PXUkXbIZIq83/yVskp5Mq6OwbI8YVn8YU3gg6j8VL4VVcgvc/onfzrwOLDtme0X6:s4IZa/y9ghOw0lZU3gb4SmwcgfzLDT0q

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks