General

  • Target
    jaffacakes118_email-with-malware-attachment.eml
  • Size 1.9MB
  • Sample260910-w79bjaw1aw
  • SHA256 cdcda582418ce278869dd857d57d7b493d380a7c0532c0f36ced8d73a176d124
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      KTMBE25040170.exe
    • Size 1.4MB
    • SHA256 116c096a488f53b298d3bac99942770afd3d791ae376534f050e6e4642c2fbb4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Creates a file in the Startup directory

      A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks