General

  • Target
    jaffacakes118_Games xcopy COLZY [heavens above biz.exe
  • Size 10.4MB
  • Sample260910-fg7f9agm4w
  • SHA256 d231c034005b29578208aae1f4f254f67b621291096932ef32c6427d084cf254
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      jaffacakes118_Games xcopy COLZY [heavens above biz.exe
    • Size 10.4MB
    • SHA256 d231c034005b29578208aae1f4f254f67b621291096932ef32c6427d084cf254
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Executes dropped EXE

    • Adds Run key to start application

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks