General

  • Target
    jaffacakes118_PC Tools Spyware Doctor 8.0.0.651 (2011) Final [Multi].exe
  • Size 8.2MB
  • Sample260910-d5c67sysbx
  • SHA256 4b7e83ea8592cce86966d68b21e83013bd25035ffccf02289c4b7b0f07fce271
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      jaffacakes118_PC Tools Spyware Doctor 8.0.0.651 (2011) Final [Multi].exe
    • Size 8.2MB
    • SHA256 4b7e83ea8592cce86966d68b21e83013bd25035ffccf02289c4b7b0f07fce271
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Modifies firewall policy service

    • Executes dropped EXE

    • Adds Run key to start application

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks