c8c6641282a4b6dc3bf1f5d054292bbd5479f36e685bbf52a1c00d2bba4d8ae9 | Triage

Sharing

General

Target

04fdaf0e40ebe6babba9066d3c628fba_JaffaCakes118
Size

1.2MB
Sample

240428-mkrcrsea4x
MD5

04fdaf0e40ebe6babba9066d3c628fba
SHA1

23f2ac0d05edae246dfcd1a604d1361e865fe8ae
SHA256

c8c6641282a4b6dc3bf1f5d054292bbd5479f36e685bbf52a1c00d2bba4d8ae9
SHA512

45117054140ba4458e7c2ecf4e8a0c0ae43220a8e81e84d98ff8de91122ba0fbf07243875697c3ca839c229db77f679b1f7440d35d4ffc348a3d1ac68d47ceaa
SSDEEP

24576:n2iqP7w5Y8eBYZ1w+/0edb/7PorKjNPUXKlRwD9S:oPTBcuSNbjWKjJU6X

Score

7^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  04fdaf0e40ebe6babba9066d3c628fba_JaffaCakes118
- Size
  
  1.2MB
- MD5
  
  04fdaf0e40ebe6babba9066d3c628fba
- SHA1
  
  23f2ac0d05edae246dfcd1a604d1361e865fe8ae
- SHA256
  
  c8c6641282a4b6dc3bf1f5d054292bbd5479f36e685bbf52a1c00d2bba4d8ae9
- SHA512
  
  45117054140ba4458e7c2ecf4e8a0c0ae43220a8e81e84d98ff8de91122ba0fbf07243875697c3ca839c229db77f679b1f7440d35d4ffc348a3d1ac68d47ceaa
- SSDEEP
  
  24576:n2iqP7w5Y8eBYZ1w+/0edb/7PorKjNPUXKlRwD9S:oPTBcuSNbjWKjJU6X
Score

7^/10

discovery evasion persistence trojan
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2

evasionpersistencetrojan