General

  • Target

    c4ef71e8de522260bfe8f594d9e2b0bd_JaffaCakes118

  • Size

    41KB

  • Sample

    241204-311t5stmfn

  • MD5

    c4ef71e8de522260bfe8f594d9e2b0bd

  • SHA1

    eea4c9f0998641854ac27681944ec4e178531d43

  • SHA256

    02cd0c93f2b6652fa005d47cc8c94e8d3f08cd1265f6f78ef1d4c5deaf12968a

  • SHA512

    f90373c466851f76e7326352f5c8e449630a2a96381c06611ebb4208842e8c7260d1db39b0856c704cb3f7eef4f86d0e128cb25625c179b3c579d6831e68df62

  • SSDEEP

    384:S9mRSCF82EkoaoP6ZbHlgbQSbof/S9daJxqpqyLohNX9iDdc0Eekq:S4RzS2r5oPglHSuJKqyLohaGX0

Malware Config

Targets

    • Target

      c4ef71e8de522260bfe8f594d9e2b0bd_JaffaCakes118

    • Size

      41KB

    • MD5

      c4ef71e8de522260bfe8f594d9e2b0bd

    • SHA1

      eea4c9f0998641854ac27681944ec4e178531d43

    • SHA256

      02cd0c93f2b6652fa005d47cc8c94e8d3f08cd1265f6f78ef1d4c5deaf12968a

    • SHA512

      f90373c466851f76e7326352f5c8e449630a2a96381c06611ebb4208842e8c7260d1db39b0856c704cb3f7eef4f86d0e128cb25625c179b3c579d6831e68df62

    • SSDEEP

      384:S9mRSCF82EkoaoP6ZbHlgbQSbof/S9daJxqpqyLohNX9iDdc0Eekq:S4RzS2r5oPglHSuJKqyLohaGX0

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks