General

  • Target

    JaffaCakes118_6ac4ce01f4358ce6e628893267707003

  • Size

    60KB

  • Sample

    250103-g61knsvqem

  • MD5

    6ac4ce01f4358ce6e628893267707003

  • SHA1

    7bacfc7b4f064d2e9733794981eac8611ee57485

  • SHA256

    df9060125b4ec3dd0034cbc4bc23569c7183fd9fa819d8e153eae0b5c3d30755

  • SHA512

    dc8a77fbf8b71ecba9af620ec1ba0ef29a61474196ebb861e8dcc7f42614176bd53d8ecd366e9eed1c29eeba1f35685f9c9c6d5a2a5cb23d3270673f473626a6

  • SSDEEP

    768:sbDI8NnowdRl/XXzkk83TozeyJaelQtWPGefYosXEQyUgL2sw/3eGpEnaS4Nc:sbDXnXNolk9JpLMEQy6sXaS7

Malware Config

Targets

    • Target

      JaffaCakes118_6ac4ce01f4358ce6e628893267707003

    • Size

      60KB

    • MD5

      6ac4ce01f4358ce6e628893267707003

    • SHA1

      7bacfc7b4f064d2e9733794981eac8611ee57485

    • SHA256

      df9060125b4ec3dd0034cbc4bc23569c7183fd9fa819d8e153eae0b5c3d30755

    • SHA512

      dc8a77fbf8b71ecba9af620ec1ba0ef29a61474196ebb861e8dcc7f42614176bd53d8ecd366e9eed1c29eeba1f35685f9c9c6d5a2a5cb23d3270673f473626a6

    • SSDEEP

      768:sbDI8NnowdRl/XXzkk83TozeyJaelQtWPGefYosXEQyUgL2sw/3eGpEnaS4Nc:sbDXnXNolk9JpLMEQy6sXaS7

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks