General

  • Target

    ea2297cd69321af3d88a091cc0a7ea4a_JaffaCakes118

  • Size

    201KB

  • Sample

    241213-gaz92azlet

  • MD5

    ea2297cd69321af3d88a091cc0a7ea4a

  • SHA1

    85fe0644bfc530cd6f705a5c3d710d0c39ce7380

  • SHA256

    db9c680d4da5154187ad31ab770d5e28ff035f8f026df554b45c978f766c3738

  • SHA512

    d32518ea464148363370fe3d3d954215a535db54a9b8f2914e30c1b4daafff4397b83fa007114fc090675f027db2b1572970d4c50e573edcf16bced63f69ecca

  • SSDEEP

    6144:Dz0oM+MgdDeJAua+mM9bDXGM5RN7zpsax+C87WH3Nf:soDdDqaNM9vH5L7eS+jWXN

Malware Config

Targets

    • Target

      ea2297cd69321af3d88a091cc0a7ea4a_JaffaCakes118

    • Size

      201KB

    • MD5

      ea2297cd69321af3d88a091cc0a7ea4a

    • SHA1

      85fe0644bfc530cd6f705a5c3d710d0c39ce7380

    • SHA256

      db9c680d4da5154187ad31ab770d5e28ff035f8f026df554b45c978f766c3738

    • SHA512

      d32518ea464148363370fe3d3d954215a535db54a9b8f2914e30c1b4daafff4397b83fa007114fc090675f027db2b1572970d4c50e573edcf16bced63f69ecca

    • SSDEEP

      6144:Dz0oM+MgdDeJAua+mM9bDXGM5RN7zpsax+C87WH3Nf:soDdDqaNM9vH5L7eS+jWXN

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks