1f717ca8f67980378a9c5408a5a542427d1036afc6a35d649953d55d150bd0af | Triage

Sharing

General

Target

16b40bd60fb04e3d92f59882b89b88d4_JaffaCakes118
Size

3.6MB
Sample

240505-jrze6sbf71
MD5

16b40bd60fb04e3d92f59882b89b88d4
SHA1

d6e64456a9eed43bd97ce5cb0da5fdbad6ade4d7
SHA256

1f717ca8f67980378a9c5408a5a542427d1036afc6a35d649953d55d150bd0af
SHA512

fd2c079dc66ee64a233506fabb85326b7f8b5596c3b6674e0f9e3f7a0758e11c7f9bb6197529b3e3fd389f7c59c4a6cdd901259cd852ac08946ad3a03b14380b
SSDEEP

98304:Qd1/ZLpUEboDIX3KeSooFhRwCQGvfENBBEXLhdS:Qf/tpEfe7wRwCQGWnMfS

Score

7^/10

evasion trojan

Malware Config

Targets

- Target
  
  MegaCheat/MegaCheat PRO.EXE
- Size
  
  3.8MB
- MD5
  
  19c8b0cf5f61477390b3b1e731bd6ae6
- SHA1
  
  f9a671e1cad8a83f97605ba720300536ddcd5164
- SHA256
  
  6263e37ba549ca2a663086c8f5e0c1d151242aa1176277bbb61615073cf2dbbf
- SHA512
  
  e7d100826a82e1cb2cf9627fbb3cfe595ccf7209486486536be3f478c1bf8b4e665c526197b8e6e709871e4de27ed984541a24c63cb0fc0f4992ee8a2c3ea7d6
- SSDEEP
  
  98304:0JV/LzFB3kdNIP3CUEQyFktM+tGQfZ5/CLH:0v/XFBwj7pB+tGKWH
Score

7^/10
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2
- Target
  
  MegaCheat/kopatels-online.ru.url
- Size
  
  115B
- MD5
  
  0107afbd3d8d6760818808055437e203
- SHA1
  
  7366d417be64804e2bf8c8bb976dddc9936c67e8
- SHA256
  
  596a0077c00681e59398a178e3f366bcee4bf3e6cfa9485dd18fc8c097ad3e07
- SHA512
  
  319edf1de563dca2fa5c92cea90b9e0c673dfb3cebdd5a8058973cee25686ef1338009721f60de10c019a5ad75c43231b5935888d716147f977920502505fc1f
Score

6^/10

evasion trojan
- Checks whether UAC is enabled
  evasion trojan
behavioral3 behavioral4

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4