General

  • Target

    bd9b3d3af0ef86fd47451dc472cb72da_JaffaCakes118

  • Size

    114KB

  • Sample

    241203-qrgcxssqcm

  • MD5

    bd9b3d3af0ef86fd47451dc472cb72da

  • SHA1

    6348771b37f54c76a2e1b68084aaef204a4057f8

  • SHA256

    dd4ab5cbd909de6f9459b0dfc8ae84973292b44ce29e3120242904dcc1067dca

  • SHA512

    e8c944310e18dc9755b9800d9d8ed78a1cd230a9a45e37c5e43c0da70acc24cc661d970bcb397a5d029450c96642b965275d5c433e6384813d2b8768ebfff80f

  • SSDEEP

    3072:UOg05ttHcJUuCO4yvpwHATcITZzXxofZuOYD:UOj5ttHcmO4yveHATcIT1qfZuO

Malware Config

Targets

    • Target

      bd9b3d3af0ef86fd47451dc472cb72da_JaffaCakes118

    • Size

      114KB

    • MD5

      bd9b3d3af0ef86fd47451dc472cb72da

    • SHA1

      6348771b37f54c76a2e1b68084aaef204a4057f8

    • SHA256

      dd4ab5cbd909de6f9459b0dfc8ae84973292b44ce29e3120242904dcc1067dca

    • SHA512

      e8c944310e18dc9755b9800d9d8ed78a1cd230a9a45e37c5e43c0da70acc24cc661d970bcb397a5d029450c96642b965275d5c433e6384813d2b8768ebfff80f

    • SSDEEP

      3072:UOg05ttHcJUuCO4yvpwHATcITZzXxofZuOYD:UOj5ttHcmO4yveHATcIT1qfZuO

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks