General

  • Target
    jaffacakes118_Trojan-Downloader.Win32.Small.act.cb7e13059244565119e58d41319c8ba1
  • Size 9KB
  • Sample261006-plcbcagv5y
  • SHA256 230d5503e16ed4bfec303104ae5f9a4e1a6ef4f67753b91150ef68caaacc9d5e
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      jaffacakes118_Trojan-Downloader.Win32.Small.act.cb7e13059244565119e58d41319c8ba1
    • Size 9KB
    • SHA256 230d5503e16ed4bfec303104ae5f9a4e1a6ef4f67753b91150ef68caaacc9d5e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v16

Tasks