General

  • Target
    jaffacakes118_[DL] Top.Rated.Software.September.20.2008.Pack-DLFT .exe
  • Size 485KB
  • Sample260910-ct7e8stflg
  • SHA256 aa342f0e7ba9367b30f974387486817e1ed532d0bc9c64a86c3fd2763d67f80b
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      jaffacakes118_[DL] Top.Rated.Software.September.20.2008.Pack-DLFT .exe
    • Size 485KB
    • SHA256 aa342f0e7ba9367b30f974387486817e1ed532d0bc9c64a86c3fd2763d67f80b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Looks for VMWare drivers on disk

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks