General

  • Target

    JaffaCakes118_976676bad8db26a6bbd98a9cb28a3a84

  • Size

    3.9MB

  • Sample

    250329-yz6lsasrv6

  • MD5

    976676bad8db26a6bbd98a9cb28a3a84

  • SHA1

    0b6aacba508efe9bb01d598e5649fc1b890d143e

  • SHA256

    95fd7c6a707703a00f29273f7d806492c771cfc37ed7ea4762db96d87f7c3e5e

  • SHA512

    3c99ad746fbce94389de0fc203565ce175e042f79c7171c45c4d6df83708a9a2bfc4814baa0ffc5e0a530d9eb6bd727a25f6554832bcf54df8d8fc2b468f5b42

  • SSDEEP

    98304:vk0u9RjiOqC9QeS3gfuW4CQuNsdaDCIKapPvHFr3O65LKAeD9YEIaxWRXK/Btvj:vk/9RjiOqC9PSbW4huLzhpPvHFi65LKZ

Malware Config

Targets

    • Target

      JaffaCakes118_976676bad8db26a6bbd98a9cb28a3a84

    • Size

      3.9MB

    • MD5

      976676bad8db26a6bbd98a9cb28a3a84

    • SHA1

      0b6aacba508efe9bb01d598e5649fc1b890d143e

    • SHA256

      95fd7c6a707703a00f29273f7d806492c771cfc37ed7ea4762db96d87f7c3e5e

    • SHA512

      3c99ad746fbce94389de0fc203565ce175e042f79c7171c45c4d6df83708a9a2bfc4814baa0ffc5e0a530d9eb6bd727a25f6554832bcf54df8d8fc2b468f5b42

    • SSDEEP

      98304:vk0u9RjiOqC9QeS3gfuW4CQuNsdaDCIKapPvHFr3O65LKAeD9YEIaxWRXK/Btvj:vk/9RjiOqC9PSbW4huLzhpPvHFi65LKZ

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks