Overview

overview

7

Static

static

3

049a29aeca...18.exe

windows7-x64

7

049a29aeca...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    049a29aeca8fba6e34578aa0c9253930_JaffaCakes118

  • Size

    811KB

  • Sample

    240428-hjq86aae3y

  • MD5

    049a29aeca8fba6e34578aa0c9253930

  • SHA1

    e7ecb4986f8021a2f00fd0ecf85830560af705d1

  • SHA256

    44ba5a67e248971a95a158c717e1992a22ab3aba885ad2bd7e87a0a08e675eda

  • SHA512

    74ded4e3b7eb529950cc9c80c3ddc5f99a045b23f05d706d68044e078a852f27a5dae40b74a4cb5b708c53d4a11d2a0dc8850c1c7402ebd36ce6433d2d916d1a

  • SSDEEP

    12288:k4h4Cf7KAR+WlAJFUKGPXrWXwX9jrhnfjeDQ6fEVGL0HGrzTUcFTG3Wx0:/4pWlAJtAX9XRfqR8mrzw6fx0

Score
7/10
discoveryevasionpersistencetrojan

Malware Config

Targets

    • Target

      049a29aeca8fba6e34578aa0c9253930_JaffaCakes118

    • Size

      811KB

    • MD5

      049a29aeca8fba6e34578aa0c9253930

    • SHA1

      e7ecb4986f8021a2f00fd0ecf85830560af705d1

    • SHA256

      44ba5a67e248971a95a158c717e1992a22ab3aba885ad2bd7e87a0a08e675eda

    • SHA512

      74ded4e3b7eb529950cc9c80c3ddc5f99a045b23f05d706d68044e078a852f27a5dae40b74a4cb5b708c53d4a11d2a0dc8850c1c7402ebd36ce6433d2d916d1a

    • SSDEEP

      12288:k4h4Cf7KAR+WlAJFUKGPXrWXwX9jrhnfjeDQ6fEVGL0HGrzTUcFTG3Wx0:/4pWlAJtAX9XRfqR8mrzw6fx0

    Score
    7/10
    discoveryevasionpersistencetrojan

    • Registers COM server for autorun

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks