General

  • Target
    jaffacakes118_Trojan.Win32.Agent.umrb.fef20fe72bd3b7cad5fc161073ded0b4
  • Size 256KB
  • Sample261015-3w4p8set6z
  • SHA256 3d0de84844a3250c4f62bc78f0e3a6a9418f5a9ed037fd474ac40b8a6a5179da
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      jaffacakes118_Trojan.Win32.Agent.umrb.fef20fe72bd3b7cad5fc161073ded0b4
    • Size 256KB
    • SHA256 3d0de84844a3250c4f62bc78f0e3a6a9418f5a9ed037fd474ac40b8a6a5179da
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects Dorkbot worm

    • Family: Dorkbot

      Dorkbot is a worm written in C++.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks