General

  • Target

    c0c59e054773a5e43ab5fe3383258d52_JaffaCakes118

  • Size

    276KB

  • Sample

    241204-exhx6axjdn

  • MD5

    c0c59e054773a5e43ab5fe3383258d52

  • SHA1

    a9caee3e2fd061c228904dfd6618eef568b8d0d2

  • SHA256

    02e47e1d7426cacc1df7577da3dc9a0269008f51bade973384f33ddf59656eed

  • SHA512

    2b233acafb63cf21051c0ec73e8c643864348d53c0eb37d5d055c0e4dc1d94f5033f04d5360bdaeeb4a77a7ea488b40e30dbb60c04bba368940dc6b2020af921

  • SSDEEP

    6144:V6QONXue11hp/B67QsAY7GV3CWSAnMn0tdMt45NBRx54EsRKKmzq:VO15/I7QOHWSV0bU4DV5GEKAq

Malware Config

Targets

    • Target

      c0c59e054773a5e43ab5fe3383258d52_JaffaCakes118

    • Size

      276KB

    • MD5

      c0c59e054773a5e43ab5fe3383258d52

    • SHA1

      a9caee3e2fd061c228904dfd6618eef568b8d0d2

    • SHA256

      02e47e1d7426cacc1df7577da3dc9a0269008f51bade973384f33ddf59656eed

    • SHA512

      2b233acafb63cf21051c0ec73e8c643864348d53c0eb37d5d055c0e4dc1d94f5033f04d5360bdaeeb4a77a7ea488b40e30dbb60c04bba368940dc6b2020af921

    • SSDEEP

      6144:V6QONXue11hp/B67QsAY7GV3CWSAnMn0tdMt45NBRx54EsRKKmzq:VO15/I7QOHWSV0bU4DV5GEKAq

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks