General

  • Target
    jaffacakes118__2d190436739198c37955554c0fa29fa3
  • Size 712KB
  • Sample260919-178gfsty5m
  • SHA256 f52afc0772d548bf5f9300e8b2f017d290dd73a2eb0f0cf2627b6ffdb29cff9f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Targets

    • Target
      jaffacakes118__2d190436739198c37955554c0fa29fa3
    • Size 712KB
    • SHA256 f52afc0772d548bf5f9300e8b2f017d290dd73a2eb0f0cf2627b6ffdb29cff9f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    • Modifies WinLogon for persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks