General

  • Target
    jaffacakes118_Trojan-Dropper.Win32.Agent.ack.d668c9b739d0e1ba10636a6c76647a7a
  • Size 85KB
  • Sample261006-shffdacw7r
  • SHA256 d6c8e4ec3d74f7d1d7a40216c0dc07f489300b642e71380d0db21864a80fb62e
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      jaffacakes118_Trojan-Dropper.Win32.Agent.ack.d668c9b739d0e1ba10636a6c76647a7a
    • Size 85KB
    • SHA256 d6c8e4ec3d74f7d1d7a40216c0dc07f489300b642e71380d0db21864a80fb62e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks