d2522c25a5138de71e4e3108ea67a0005606fe2a12d3ff67f7eace0da4e8ec45 | Triage

Sharing

General

Target

024a436ef98699ca1190b56439dbbf74_JaffaCakes118
Size

684KB
Sample

240427-drvt4ahg84
MD5

024a436ef98699ca1190b56439dbbf74
SHA1

cbd3a8ebf85c7bf41217b16d81dec90a4303aff7
SHA256

d2522c25a5138de71e4e3108ea67a0005606fe2a12d3ff67f7eace0da4e8ec45
SHA512

794de82d8a483a1f96d1a0ba75aa9465fb926d18847734b261a5a800713ec1ee5061c1b7d53ccda913d6131085a301d67a727de106744722feba0f81bc02eaca
SSDEEP

12288://ZqsC9Pa6P8Xu+Y0+4Kk3R61B0iYWfJWCMQHxvZj3uHcwTIfM1GjT9Alu:/sD18Xa1A3YBZffJWCNhjeFTIfMUvOlu

Score

7^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  024a436ef98699ca1190b56439dbbf74_JaffaCakes118
- Size
  
  684KB
- MD5
  
  024a436ef98699ca1190b56439dbbf74
- SHA1
  
  cbd3a8ebf85c7bf41217b16d81dec90a4303aff7
- SHA256
  
  d2522c25a5138de71e4e3108ea67a0005606fe2a12d3ff67f7eace0da4e8ec45
- SHA512
  
  794de82d8a483a1f96d1a0ba75aa9465fb926d18847734b261a5a800713ec1ee5061c1b7d53ccda913d6131085a301d67a727de106744722feba0f81bc02eaca
- SSDEEP
  
  12288://ZqsC9Pa6P8Xu+Y0+4Kk3R61B0iYWfJWCMQHxvZj3uHcwTIfM1GjT9Alu:/sD18Xa1A3YBZffJWCNhjeFTIfMUvOlu
Score

7^/10

discovery evasion persistence trojan
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2

evasionpersistencetrojan