General

  • Target
    jaffacakes118_HEUR.Trojan.Win32.Generic.3dee2c09c5f2643b6518441433702a96
  • Size 120KB
  • Sample261014-ch3b5set8x
  • SHA256 c8a0b10abfe276c8e66bdc1b49edadf90673f32ef3217868b4bf7538bacbeba7
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      jaffacakes118_HEUR.Trojan.Win32.Generic.3dee2c09c5f2643b6518441433702a96
    • Size 120KB
    • SHA256 c8a0b10abfe276c8e66bdc1b49edadf90673f32ef3217868b4bf7538bacbeba7
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Adds Run key to start application

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks