General

  • Target
    jaffacakes118_Trojan-Dropper.Win32.Autit.rg.7cfbd154d705da03a1baa406c1351c54
  • Size 1.1MB
  • Sample261009-v3klyadb44
  • SHA256 4976ce7cc66bbb564a2214a3a515ccba6debe0f0a1f06149843b58e54482019f
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      jaffacakes118_Trojan-Dropper.Win32.Autit.rg.7cfbd154d705da03a1baa406c1351c54
    • Size 1.1MB
    • SHA256 4976ce7cc66bbb564a2214a3a515ccba6debe0f0a1f06149843b58e54482019f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Creates a file in the Startup directory

      A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v16

Tasks