General

  • Target
    jaffacakes118_Trojan-Dropper.Win32.Daws.awew.3f899c1a8c0e52187165410ed2f1598b
  • Size 134KB
  • Sample261009-wheqmacv5x
  • SHA256 a3f9a8c98c7ee05d870532889e0b899aef3da48c4153d5db61230ad71c8aeae2
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      jaffacakes118_Trojan-Dropper.Win32.Daws.awew.3f899c1a8c0e52187165410ed2f1598b
    • Size 134KB
    • SHA256 a3f9a8c98c7ee05d870532889e0b899aef3da48c4153d5db61230ad71c8aeae2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks