General

  • Target
    jaffacakes118_Desksware Desktop iCalendar v1.2.7.0 + KeyGen.exe
  • Size 697KB
  • Sample260910-epv8hsy1ay
  • SHA256 0df949fcae56bc0866dfe9a2334192cfcb571bdd8ff9737b58a4f6d0129da823
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10

Malware Config

Targets

    • Target
      jaffacakes118_Desksware Desktop iCalendar v1.2.7.0 + KeyGen.exe
    • Size 697KB
    • SHA256 0df949fcae56bc0866dfe9a2334192cfcb571bdd8ff9737b58a4f6d0129da823
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    9/10
    • Detected Nirsoft tools

      Free utilities often used by attackers which can steal passwords, product keys, etc.

    • NirSoft MailPassView

      Password recovery tool for various email clients

    • Accesses Microsoft Outlook accounts

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks