General

  • Target
    jaffacakes118_[lightingspeeds com] Windows WGA removal tool Boris1987.exe
  • Size 10.4MB
  • Sample260910-fblmlayajg
  • SHA256 0cd8c12f8a91de3ebcea3bbe81663984ab5baa18bd86ec927d766af66c9177f4
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      jaffacakes118_[lightingspeeds com] Windows WGA removal tool Boris1987.exe
    • Size 10.4MB
    • SHA256 0cd8c12f8a91de3ebcea3bbe81663984ab5baa18bd86ec927d766af66c9177f4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Executes dropped EXE

    • Adds Run key to start application

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks