General

  • Target
    jaffacakes118_EffectMatrix_Total_Video_Converter_v.12.080330.rar.exe
  • Size 7.9MB
  • Sample260910-dj3vqsverh
  • SHA256 7b354703a1da544c72519ce47685a05ee0e2370c8d1856262b4c2f2a993d2512
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      jaffacakes118_EffectMatrix_Total_Video_Converter_v.12.080330.rar.exe
    • Size 7.9MB
    • SHA256 7b354703a1da544c72519ce47685a05ee0e2370c8d1856262b4c2f2a993d2512
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Looks for VMWare drivers on disk

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks for any installed AV software in registry

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks