General

  • Target
    jaffacakes118_Trojan-Downloader.Win32.Small.bsw.846ea7fee0162e056fab3828e1dbefc0
  • Size 36KB
  • Sample261006-p86tgazvbw
  • SHA256 41d0974cbdef4ea3f95857128c668217b42510a911b620909b430ca9575ebd78
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      jaffacakes118_Trojan-Downloader.Win32.Small.bsw.846ea7fee0162e056fab3828e1dbefc0
    • Size 36KB
    • SHA256 41d0974cbdef4ea3f95857128c668217b42510a911b620909b430ca9575ebd78
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Modifies WinLogon for persistence

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks