General

  • Target

    fa9425fbafe132cecbb72c0efd94a001_JaffaCakes118

  • Size

    125KB

  • Sample

    241218-hytb3azmek

  • MD5

    fa9425fbafe132cecbb72c0efd94a001

  • SHA1

    902c140c3036d8ae4ccae29097427c23b2c2afba

  • SHA256

    f7ce4e58c5b24861f076acf321b2e566ac6944857eb3b7574985de1e779104a7

  • SHA512

    ee38a178dc86009bf509f52485d6fd694f1c70c818ce1c2f951dd9380caf6c6503c4d3c31046cb37827a2f16768ce46abf4a342f2043fd83f3842bfeb4390650

  • SSDEEP

    3072:UOg05ttHcJUuCO4yvpwHATcITZzXxofZuOYD:UOj5ttHcmO4yveHATcIT1qfZuO

Malware Config

Targets

    • Target

      fa9425fbafe132cecbb72c0efd94a001_JaffaCakes118

    • Size

      125KB

    • MD5

      fa9425fbafe132cecbb72c0efd94a001

    • SHA1

      902c140c3036d8ae4ccae29097427c23b2c2afba

    • SHA256

      f7ce4e58c5b24861f076acf321b2e566ac6944857eb3b7574985de1e779104a7

    • SHA512

      ee38a178dc86009bf509f52485d6fd694f1c70c818ce1c2f951dd9380caf6c6503c4d3c31046cb37827a2f16768ce46abf4a342f2043fd83f3842bfeb4390650

    • SSDEEP

      3072:UOg05ttHcJUuCO4yvpwHATcITZzXxofZuOYD:UOj5ttHcmO4yveHATcIT1qfZuO

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks