General

  • Target
    jaffacakes118_Trojan-Dropper.Win32.Fimarker.56e9b2215d0ea83651dec20b375844f2
  • Size 696KB
  • Sample261009-xb3pjsdf65
  • SHA256 5b9128e5ba4e11988a013ed7b145148cd2c992209a49016f09c3b52677c8efa8
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      jaffacakes118_Trojan-Dropper.Win32.Fimarker.56e9b2215d0ea83651dec20b375844f2
    • Size 696KB
    • SHA256 5b9128e5ba4e11988a013ed7b145148cd2c992209a49016f09c3b52677c8efa8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v16

Tasks