General

  • Target

    cc2417f1585a0921c89731703f031155_JaffaCakes118

  • Size

    128KB

  • Sample

    241206-kx9zjavqhn

  • MD5

    cc2417f1585a0921c89731703f031155

  • SHA1

    9ae96f433a4f9614d2481036fd59c88fdfbbf696

  • SHA256

    1abf6e0fd4db0d808c25c91e5f531a950e423e12286c1c2aa0fe55504d5aaa38

  • SHA512

    76ea41f1b6bbf610d742a725ddc14e194f10cbeee926e90aa9b5b3f074490dc5d6d80e3659d402d6dcb8ecb98ccee7174c07f2d4cb02e02f2c3dacd2958152ef

  • SSDEEP

    3072:I+tVV2x4+HnOf20oEwLlCz6YFU5acAxbeqT1tgLeewvE4JBsbRMQVN0J2:rVAHD0o/UpFho4t+ek+ybBaJ2

Malware Config

Targets

    • Target

      cc2417f1585a0921c89731703f031155_JaffaCakes118

    • Size

      128KB

    • MD5

      cc2417f1585a0921c89731703f031155

    • SHA1

      9ae96f433a4f9614d2481036fd59c88fdfbbf696

    • SHA256

      1abf6e0fd4db0d808c25c91e5f531a950e423e12286c1c2aa0fe55504d5aaa38

    • SHA512

      76ea41f1b6bbf610d742a725ddc14e194f10cbeee926e90aa9b5b3f074490dc5d6d80e3659d402d6dcb8ecb98ccee7174c07f2d4cb02e02f2c3dacd2958152ef

    • SSDEEP

      3072:I+tVV2x4+HnOf20oEwLlCz6YFU5acAxbeqT1tgLeewvE4JBsbRMQVN0J2:rVAHD0o/UpFho4t+ek+ybBaJ2

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks