e48fcc2929ddd6fa905074dbd657e907e62a98928d7c4fbbe9ad7640b06d44ce | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ebdcaad63e5018cef8fa194273c62d8a_JaffaCakes118
Size

736KB
Sample

240410-ykppqada8t
MD5

ebdcaad63e5018cef8fa194273c62d8a
SHA1

c9dbd480b263822786dd8d8180e5edb73d054c48
SHA256

e48fcc2929ddd6fa905074dbd657e907e62a98928d7c4fbbe9ad7640b06d44ce
SHA512

5b20191b5d3306090df23a1f7e022919a6072f3f3fb41e725677cf0bd0b9558c2169a273134b0b67212ae93a145a1e01fd7df5a15f7116f6eaebc27fc40e4a31
SSDEEP

12288:VpFaeMhcyY44UuX986MryYxI0BwqIvOaznvd:/FoHZ4986Mry1rqIGmd

Score

8^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  ebdcaad63e5018cef8fa194273c62d8a_JaffaCakes118
- Size
  
  736KB
- MD5
  
  ebdcaad63e5018cef8fa194273c62d8a
- SHA1
  
  c9dbd480b263822786dd8d8180e5edb73d054c48
- SHA256
  
  e48fcc2929ddd6fa905074dbd657e907e62a98928d7c4fbbe9ad7640b06d44ce
- SHA512
  
  5b20191b5d3306090df23a1f7e022919a6072f3f3fb41e725677cf0bd0b9558c2169a273134b0b67212ae93a145a1e01fd7df5a15f7116f6eaebc27fc40e4a31
- SSDEEP
  
  12288:VpFaeMhcyY44UuX986MryYxI0BwqIvOaznvd:/FoHZ4986Mry1rqIGmd
Score

8^/10

evasion persistence trojan
- Modifies Installed Components in the registry
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2