6d02c6eafd84c920450d1b2e5a7e0fa456bed0c7135294c9813e6b756789d7f6 | Triage

Sharing

General

Target

072f42c0a2815729c9411c4470b6d6f4_JaffaCakes118
Size

399KB
Sample

240328-q5qthsgg53
MD5

072f42c0a2815729c9411c4470b6d6f4
SHA1

6cb4f79e6a5f2ddcddbbe8e11f02dd0749f331cd
SHA256

6d02c6eafd84c920450d1b2e5a7e0fa456bed0c7135294c9813e6b756789d7f6
SHA512

d2e5360b27408c4f6a108034f81a968abeec58ae5a6ea618c32492494e8204a657c483fd38519597ca6c13abb46277d470d38144415b4275cb671f9e7cb2deef
SSDEEP

12288:a37nmvNn8ftQsi31qhoMqNkNOEv540hx:IzmvNetfyHnNsv5px

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  072f42c0a2815729c9411c4470b6d6f4_JaffaCakes118
- Size
  
  399KB
- MD5
  
  072f42c0a2815729c9411c4470b6d6f4
- SHA1
  
  6cb4f79e6a5f2ddcddbbe8e11f02dd0749f331cd
- SHA256
  
  6d02c6eafd84c920450d1b2e5a7e0fa456bed0c7135294c9813e6b756789d7f6
- SHA512
  
  d2e5360b27408c4f6a108034f81a968abeec58ae5a6ea618c32492494e8204a657c483fd38519597ca6c13abb46277d470d38144415b4275cb671f9e7cb2deef
- SSDEEP
  
  12288:a37nmvNn8ftQsi31qhoMqNkNOEv540hx:IzmvNetfyHnNsv5px
Score

10^/10

evasion trojan
- UAC bypass
  evasion trojan
- Drops startup file
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2