9d6d57071a0b8aa8488beee88391afd0ac8b8c3812c5a989616e85ae19379724 | Triage

Sharing

General

Target

0d8fa1316f5c86e419904929e0168577_JaffaCakes118
Size

855KB
Sample

240502-fkwtxshd6s
MD5

0d8fa1316f5c86e419904929e0168577
SHA1

6446eeee64a467787b9ad79d00977d940ef71ee8
SHA256

9d6d57071a0b8aa8488beee88391afd0ac8b8c3812c5a989616e85ae19379724
SHA512

7c0f854d1e48655287d539368ce6f38dc0383bddd5d6826d3ebc7d954800a5b4c813e3f098cd0752c813a7f73f93408fe2f89a1c02df277c8183c21ed7fcff68
SSDEEP

12288:uEbJAYjnZg+DjNBVWLu24GjI9ll6mkumrv63E9eX8za/WvvcEfGt8Bii6VsdUdQh:uEMo7S4smlhkxvcEsX8AWMiBiiIotTyG

Score

7^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  0d8fa1316f5c86e419904929e0168577_JaffaCakes118
- Size
  
  855KB
- MD5
  
  0d8fa1316f5c86e419904929e0168577
- SHA1
  
  6446eeee64a467787b9ad79d00977d940ef71ee8
- SHA256
  
  9d6d57071a0b8aa8488beee88391afd0ac8b8c3812c5a989616e85ae19379724
- SHA512
  
  7c0f854d1e48655287d539368ce6f38dc0383bddd5d6826d3ebc7d954800a5b4c813e3f098cd0752c813a7f73f93408fe2f89a1c02df277c8183c21ed7fcff68
- SSDEEP
  
  12288:uEbJAYjnZg+DjNBVWLu24GjI9ll6mkumrv63E9eX8za/WvvcEfGt8Bii6VsdUdQh:uEMo7S4smlhkxvcEsX8AWMiBiiIotTyG
Score

7^/10

discovery evasion persistence trojan
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2

evasionpersistencetrojan