General

  • Target

    e388058e479031dc924e5c5223f61f37_JaffaCakes118

  • Size

    193KB

  • Sample

    241211-2lgmaavrfp

  • MD5

    e388058e479031dc924e5c5223f61f37

  • SHA1

    16270356ad6436c4acc2ec949325a25d33110b28

  • SHA256

    39fa851f0c59040c170e3579cff725184ec19cbf7de726f343d862968828640d

  • SHA512

    7a6d9b9decf885c424a99bdc7fe8ec34b706b48e097ca00bd17e90b5c5c438a6459d344d38076739ccce5cb8482259d046b0f3508355e0ca8f3b1e34ef61f856

  • SSDEEP

    6144:6IpzVD56qtWctEC6/tvnaUtObpR07oixX:6azV16qt5CD/tLtQEX

Malware Config

Targets

    • Target

      e388058e479031dc924e5c5223f61f37_JaffaCakes118

    • Size

      193KB

    • MD5

      e388058e479031dc924e5c5223f61f37

    • SHA1

      16270356ad6436c4acc2ec949325a25d33110b28

    • SHA256

      39fa851f0c59040c170e3579cff725184ec19cbf7de726f343d862968828640d

    • SHA512

      7a6d9b9decf885c424a99bdc7fe8ec34b706b48e097ca00bd17e90b5c5c438a6459d344d38076739ccce5cb8482259d046b0f3508355e0ca8f3b1e34ef61f856

    • SSDEEP

      6144:6IpzVD56qtWctEC6/tvnaUtObpR07oixX:6azV16qt5CD/tLtQEX

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks