General

  • Target

    d80e4760fd0c4e4d59062e2237115540_JaffaCakes118

  • Size

    456KB

  • Sample

    241208-vcmcvazjcv

  • MD5

    d80e4760fd0c4e4d59062e2237115540

  • SHA1

    50f15f4e93821ae6f4593462a56a407e4ff56e0f

  • SHA256

    b15073458e2e5e7ead20275dad66d2fa9d49b7c9ab6cce2807446ec2e96e38db

  • SHA512

    a045fd549e328f1e316b8134d5fdcd7ee589826bbd2f2cb704d4869a8af7968da229614d1e1b8f3578f02590f050e9ca1814317ea8ff1c403620c3a3b138efb7

  • SSDEEP

    12288:RxwnVSwVni7zIkIzV6aj84FQt0yNDisbYfx:0VjiPTIzV6KFQt0WDiQsx

Malware Config

Targets

    • Target

      d80e4760fd0c4e4d59062e2237115540_JaffaCakes118

    • Size

      456KB

    • MD5

      d80e4760fd0c4e4d59062e2237115540

    • SHA1

      50f15f4e93821ae6f4593462a56a407e4ff56e0f

    • SHA256

      b15073458e2e5e7ead20275dad66d2fa9d49b7c9ab6cce2807446ec2e96e38db

    • SHA512

      a045fd549e328f1e316b8134d5fdcd7ee589826bbd2f2cb704d4869a8af7968da229614d1e1b8f3578f02590f050e9ca1814317ea8ff1c403620c3a3b138efb7

    • SSDEEP

      12288:RxwnVSwVni7zIkIzV6aj84FQt0yNDisbYfx:0VjiPTIzV6KFQt0WDiQsx

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks