General

  • Target
    jaffacakes118_Trojan-Dropper.Win32.Scrop.cva.3e64b43c76dfc9f20272b301e34f1d6a
  • Size 491KB
  • Sample261009-ydsg2abs5p
  • SHA256 8d2e94f810fa99c55b6143600045221c8c9516b3be4f5091844d5b1a41a41b1e
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      jaffacakes118_Trojan-Dropper.Win32.Scrop.cva.3e64b43c76dfc9f20272b301e34f1d6a
    • Size 491KB
    • SHA256 8d2e94f810fa99c55b6143600045221c8c9516b3be4f5091844d5b1a41a41b1e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Creates a file in the Startup directory

      A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v16

Tasks