General

  • Target
    jaffacakes118_Worm.Win32.Vobfus.dmad.da33466de6c818af68e6c7b39a49288f
  • Size 148KB
  • Sample261015-2gdptstscv
  • SHA256 9f27347f0d45f7fc5a4cca1c79aeb630680c0c67cbb5a25358f733c43a15194f
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      jaffacakes118_Worm.Win32.Vobfus.dmad.da33466de6c818af68e6c7b39a49288f
    • Size 148KB
    • SHA256 9f27347f0d45f7fc5a4cca1c79aeb630680c0c67cbb5a25358f733c43a15194f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Modifies visibility of hidden/system files in Explorer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v16

Tasks