General

  • Target
    jaffacakes118_Trojan-Dropper.Win32.Agent.jzxt.43ddb86a7b3271fc000fa5c035b2e37c
  • Size 68KB
  • Sample261006-tf6p8aav91
  • SHA256 cde2f394800822ae9d88426c0b6de9747062971885b22a2bb55b8c4fc36496c9
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      jaffacakes118_Trojan-Dropper.Win32.Agent.jzxt.43ddb86a7b3271fc000fa5c035b2e37c
    • Size 68KB
    • SHA256 cde2f394800822ae9d88426c0b6de9747062971885b22a2bb55b8c4fc36496c9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Executes dropped EXE

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks