2cd6171d1aea18e28d0287b9cded8c5ab6d3b82117ef25043ace4f9c0bdd604b | Triage

Sharing

General

Target

fcf2a0991852b7db83b4c89546edab5d_JaffaCakes118
Size

492KB
Sample

240420-rmlyaaad79
MD5

fcf2a0991852b7db83b4c89546edab5d
SHA1

acd1459c76305294f123bb3fe709fb35fb46fc91
SHA256

2cd6171d1aea18e28d0287b9cded8c5ab6d3b82117ef25043ace4f9c0bdd604b
SHA512

9307f77fa3b66b1c20603a9a082a9d14657e138cb7465d537db023f8d533133780c835ad25037a844163a99e374ef1ac7d78852fd55f5e77e71c4e4fdb5686f5
SSDEEP

6144:VzC7l48ZYmXUuvxRYIkJTBIEXXSlMlxMDG+m5sV+Shi/aabAP5U:wydovTWJTBrH86+QsthGA

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  fcf2a0991852b7db83b4c89546edab5d_JaffaCakes118
- Size
  
  492KB
- MD5
  
  fcf2a0991852b7db83b4c89546edab5d
- SHA1
  
  acd1459c76305294f123bb3fe709fb35fb46fc91
- SHA256
  
  2cd6171d1aea18e28d0287b9cded8c5ab6d3b82117ef25043ace4f9c0bdd604b
- SHA512
  
  9307f77fa3b66b1c20603a9a082a9d14657e138cb7465d537db023f8d533133780c835ad25037a844163a99e374ef1ac7d78852fd55f5e77e71c4e4fdb5686f5
- SSDEEP
  
  6144:VzC7l48ZYmXUuvxRYIkJTBIEXXSlMlxMDG+m5sV+Shi/aabAP5U:wydovTWJTBrH86+QsthGA
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2