General

  • Target
    jaffacakes118_Trojan-Dropper.Win32.FrauDrop.aivkv.91162742affef8460e721c08d57c87c0
  • Size 7.9MB
  • Sample261009-xdafsastdw
  • SHA256 21c7791451c26f5ca9b436e40fa91a93785b10097723b6741d843b2125ff35c1
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      jaffacakes118_Trojan-Dropper.Win32.FrauDrop.aivkv.91162742affef8460e721c08d57c87c0
    • Size 7.9MB
    • SHA256 21c7791451c26f5ca9b436e40fa91a93785b10097723b6741d843b2125ff35c1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Discovers running processes

      Running process information can be used to identify security tools or plan follow-on actions.

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v16

Tasks