40b905971cf41d4c175cdc3ff6bf2d6ef7e40283115f6d601cd345d08de1b360 | Triage

Sharing

General

Target

143d41ca7b94f1efb8ec13a6bfe420ed_JaffaCakes118
Size

845KB
Sample

240504-yl6dvshc21
MD5

143d41ca7b94f1efb8ec13a6bfe420ed
SHA1

5044a0accc27700f2ee7bf4494c8775f796083c7
SHA256

40b905971cf41d4c175cdc3ff6bf2d6ef7e40283115f6d601cd345d08de1b360
SHA512

807e0af69fcc3b074ef91a66b46077a1b6b813deeb9e19a5b59a0a99e5a08ed04ad019126b33b5d0a1f3beb7295ecdf2bd6f59f74dd6cc0efdc9f2359386eea0
SSDEEP

24576:j+FOC0R2mA/g29zTLcyJJEotnVQRvJiOL2dSNquTJiT:j+FOC0R2m32TIYdtVQRvJi25Iu4T

Score

7^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  143d41ca7b94f1efb8ec13a6bfe420ed_JaffaCakes118
- Size
  
  845KB
- MD5
  
  143d41ca7b94f1efb8ec13a6bfe420ed
- SHA1
  
  5044a0accc27700f2ee7bf4494c8775f796083c7
- SHA256
  
  40b905971cf41d4c175cdc3ff6bf2d6ef7e40283115f6d601cd345d08de1b360
- SHA512
  
  807e0af69fcc3b074ef91a66b46077a1b6b813deeb9e19a5b59a0a99e5a08ed04ad019126b33b5d0a1f3beb7295ecdf2bd6f59f74dd6cc0efdc9f2359386eea0
- SSDEEP
  
  24576:j+FOC0R2mA/g29zTLcyJJEotnVQRvJiOL2dSNquTJiT:j+FOC0R2m32TIYdtVQRvJi25Iu4T
Score

7^/10

discovery evasion persistence trojan
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2

evasionpersistencetrojan