General
- Target jaffacakes118_Backdoor.Win32.DsBot.jm.e775857fc31b67678e6d2fb646328b70
- Size 178KB
- Sample261009-tkb2eagw2n
- SHA256 c2718051c648608475225ba8453fcc99dce7dc5b51d03af9de92adfb5d65e8b6
Score
10/10
Malware Config
Targets
-
- Target jaffacakes118_Backdoor.Win32.DsBot.jm.e775857fc31b67678e6d2fb646328b70
- Size 178KB
- SHA256 c2718051c648608475225ba8453fcc99dce7dc5b51d03af9de92adfb5d65e8b6
Score10/10-
Modifies security service
-
Windows security bypass
-
Looks for VMWare Tools registry key
-
Deletes itself
-
Executes dropped EXE
-
Windows security modification
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Defense Evasion
Impair Defenses
2Disable or Modify Tools
2Indicator Removal
1File Deletion
1Modify Registry
3Virtualization/Sandbox Evasion
1