General

  • Target

    d142a966f2be75b7778f00b79416a321_JaffaCakes118

  • Size

    25KB

  • Sample

    241207-h7qbrsxqer

  • MD5

    d142a966f2be75b7778f00b79416a321

  • SHA1

    1906093a1c6c64a1cf3b68ef865997b75a978273

  • SHA256

    1a21dcc75282f76a17db129a26dbef377e3d22db64617028f83d96e7b977dec3

  • SHA512

    7a37079d2b16d287e3b83092ed877ba024f3dee43b6e5b2eb4d60de5a5729bbf49a6087c8ad9c4bb0c17c268d23dd80cfb38c0d84ec4cd80720b2640f3d119e7

  • SSDEEP

    768:KOWerqdRQVsz2DcY2vr1QuL6DDk9fitf9xxGWfOiX:xRrqdRQVsiz2l6Dmcf9xAsOW

Malware Config

Targets

    • Target

      d142a966f2be75b7778f00b79416a321_JaffaCakes118

    • Size

      25KB

    • MD5

      d142a966f2be75b7778f00b79416a321

    • SHA1

      1906093a1c6c64a1cf3b68ef865997b75a978273

    • SHA256

      1a21dcc75282f76a17db129a26dbef377e3d22db64617028f83d96e7b977dec3

    • SHA512

      7a37079d2b16d287e3b83092ed877ba024f3dee43b6e5b2eb4d60de5a5729bbf49a6087c8ad9c4bb0c17c268d23dd80cfb38c0d84ec4cd80720b2640f3d119e7

    • SSDEEP

      768:KOWerqdRQVsz2DcY2vr1QuL6DDk9fitf9xxGWfOiX:xRrqdRQVsiz2l6Dmcf9xAsOW

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks