General

  • Target
    jaffacakes118_Trojan-Dropper.Win32.ArchSMS.ahd.da7ebb8fa4b8286e85c2fceb974bc399
  • Size 738KB
  • Sample261009-v2pt9scs7x
  • SHA256 576809051d989f1ecc357740a628ebd6ebcb36964b819d5d58c16c444e18e53d
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      jaffacakes118_Trojan-Dropper.Win32.ArchSMS.ahd.da7ebb8fa4b8286e85c2fceb974bc399
    • Size 738KB
    • SHA256 576809051d989f1ecc357740a628ebd6ebcb36964b819d5d58c16c444e18e53d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v16

Tasks