General

  • Target
    jaffacakes118_[IT]First Class Franzoesisch Basis Sprachkurs v8 RHI.exe
  • Size 10.4MB
  • Sample260910-c57v5swyf1
  • SHA256 67b251d627bf0a24518705c8a9d95f175c4d3b9c0a4289f4714defe28587b04f
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      jaffacakes118_[IT]First Class Franzoesisch Basis Sprachkurs v8 RHI.exe
    • Size 10.4MB
    • SHA256 67b251d627bf0a24518705c8a9d95f175c4d3b9c0a4289f4714defe28587b04f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Executes dropped EXE

    • Adds Run key to start application

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks