General

  • Target
    jaffacakes118_Trojan-Dropper.Win32.Injector.pcim.88946a026e76132c06d4ba7f9bf5c385
  • Size 139KB
  • Sample261009-xth3vsty2r
  • SHA256 af5628f612b8bc36a4a706a231988132baccbe439c4c618952e9d58314f01255
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      jaffacakes118_Trojan-Dropper.Win32.Injector.pcim.88946a026e76132c06d4ba7f9bf5c385
    • Size 139KB
    • SHA256 af5628f612b8bc36a4a706a231988132baccbe439c4c618952e9d58314f01255
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Adds policy Run key to start application

    • Loads dropped DLL

    • Adds Run key to start application

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v16

Tasks