General

  • Target
    jaffacakes118_HEUR.Trojan.Win32.Generic.29bf2af3e3447aae18b3dd3f240678b8
  • Size 400KB
  • Sample261014-assvcaes2r
  • SHA256 b1bc51844e740c971830e6b81eca4a9440ab631372550c192cd86d9b5332a5b4
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      jaffacakes118_HEUR.Trojan.Win32.Generic.29bf2af3e3447aae18b3dd3f240678b8
    • Size 400KB
    • SHA256 b1bc51844e740c971830e6b81eca4a9440ab631372550c192cd86d9b5332a5b4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Modifies WinLogon for persistence

    • Deletes itself

    • Executes dropped EXE

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v16

Tasks