General

  • Target

    ea2d40381b1c68070db71dadd170eff1_JaffaCakes118

  • Size

    86KB

  • Sample

    241213-gh8alsznaz

  • MD5

    ea2d40381b1c68070db71dadd170eff1

  • SHA1

    5f53767f22319bc717fe9f2fd81d737fa8855e99

  • SHA256

    89fb932451a6666919926ca0255d9e250d1f53f3b3c9d9e3f5b770e9aa490be7

  • SHA512

    fa136b674a542fa7e326edca01a182cc051cd9503af6a02ca61efa760af2eceac6446d98d9f1471291b265d6d3c325ed9278d0afe5d6800ad78ba253e737ecd0

  • SSDEEP

    768:78Jqh2/DRlS2R2Q8ExPtsTNXfmW/uDs8jr3333333rl3l8IkNxqTkm580oocyZ4i:FhqzJFCNvmWGDjSpT8ZT4wrpDG3mR

Malware Config

Targets

    • Target

      ea2d40381b1c68070db71dadd170eff1_JaffaCakes118

    • Size

      86KB

    • MD5

      ea2d40381b1c68070db71dadd170eff1

    • SHA1

      5f53767f22319bc717fe9f2fd81d737fa8855e99

    • SHA256

      89fb932451a6666919926ca0255d9e250d1f53f3b3c9d9e3f5b770e9aa490be7

    • SHA512

      fa136b674a542fa7e326edca01a182cc051cd9503af6a02ca61efa760af2eceac6446d98d9f1471291b265d6d3c325ed9278d0afe5d6800ad78ba253e737ecd0

    • SSDEEP

      768:78Jqh2/DRlS2R2Q8ExPtsTNXfmW/uDs8jr3333333rl3l8IkNxqTkm580oocyZ4i:FhqzJFCNvmWGDjSpT8ZT4wrpDG3mR

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks