General

  • Target
    jaffacakes118_XP CyberMac Extreme SP3 2009.exe
  • Size 8.2MB
  • Sample260910-c2rdzsthnf
  • SHA256 df51e1f4130067d2913f8f30e4a5ef8bae6ca95a0219ab532b17db56c8bb54de
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      jaffacakes118_XP CyberMac Extreme SP3 2009.exe
    • Size 8.2MB
    • SHA256 df51e1f4130067d2913f8f30e4a5ef8bae6ca95a0219ab532b17db56c8bb54de
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Modifies firewall policy service

    • Executes dropped EXE

    • Adds Run key to start application

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks