General

  • Target
    jaffacakes118_Trojan.Win32.Jorik.Fraud.vi.200e093d50ef99864c96bf4411f1ecba
  • Size 327KB
  • Sample261006-v63xpabv91
  • SHA256 6732f6dfe4af41610b96baf687592590a63ae54b27c4b17586c684e3ead82310
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      jaffacakes118_Trojan.Win32.Jorik.Fraud.vi.200e093d50ef99864c96bf4411f1ecba
    • Size 327KB
    • SHA256 6732f6dfe4af41610b96baf687592590a63ae54b27c4b17586c684e3ead82310
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Manipulates Digital Signatures

      Attackers can apply techniques such as changing the registry keys of authenticode & Cryptography to make their binary seem validly signed.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v16

Tasks