General
- Target jaffacakes118_Trojan.Win32.Jorik.Fraud.vi.200e093d50ef99864c96bf4411f1ecba
- Size 327KB
- Sample261006-v63xpabv91
- SHA256 6732f6dfe4af41610b96baf687592590a63ae54b27c4b17586c684e3ead82310
- MD5 200e093d50ef99864c96bf4411f1ecba
- SHA1 240cb6f860612785d745e5e183ecf43365b919eb
- SHA512 db5f4fb780d8e6ca9e4e715f9db3b305dbaa44c831309e3f46f6f701039f4d4b84140c8eb8a494bcec14dcae09b073e2735c995734c74e6043a158ec30f8c3fa
- SSDEEP 6144:XAizuqAF+tu0Ph+xRkZKQC3jKKvqeyD7Hvd2D7oLk:XAkDQKZayHk/a
- TLSH T105641249BE71611ADC37B4F961748D1120BDFD2099712B0B1AB271E222F18E7EE3952F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan.Win32.Jorik.Fraud.vi.exe
Resource
win10v2004-20260911-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan.Win32.Jorik.Fraud.vi.200e093d50ef99864c96bf4411f1ecba
- Size 327KB
- SHA256 6732f6dfe4af41610b96baf687592590a63ae54b27c4b17586c684e3ead82310
- MD5 200e093d50ef99864c96bf4411f1ecba
- SHA1 240cb6f860612785d745e5e183ecf43365b919eb
- SHA512 db5f4fb780d8e6ca9e4e715f9db3b305dbaa44c831309e3f46f6f701039f4d4b84140c8eb8a494bcec14dcae09b073e2735c995734c74e6043a158ec30f8c3fa
- SSDEEP 6144:XAizuqAF+tu0Ph+xRkZKQC3jKKvqeyD7Hvd2D7oLk:XAkDQKZayHk/a
- TLSH T105641249BE71611ADC37B4F961748D1120BDFD2099712B0B1AB271E222F18E7EE3952F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Manipulates Digital Signatures
Attackers can apply techniques such as changing the registry keys of authenticode & Cryptography to make their binary seem validly signed.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1SIP and Trust Provider Hijacking
1