92b2dda3a940b35b940c4045e62cd92d070f5bd06cce37ba1d4760e854e4c774 | Triage

Sharing

General

Target

24c8372c1b3e645a4ef2a7e4734f83c3_JaffaCakes118
Size

797KB
Sample

240508-pc7e5aed26
MD5

24c8372c1b3e645a4ef2a7e4734f83c3
SHA1

1ff83c04b98ed758ecafe77845f970bd57bfcaa2
SHA256

92b2dda3a940b35b940c4045e62cd92d070f5bd06cce37ba1d4760e854e4c774
SHA512

c24616af9d576afd76dfec840ad9f94393e852d8d6cdf4959e5733afda59de1723fb3679839280f6bb852b2ea7d7b807bba4ff8329d36a5cce109e5d46d6ae49
SSDEEP

24576:P+7ZX6L8foPiymPgonf/rFK+nDg4qAOFXA4WtekTY6:PUZfY2gQrPgFVFXt6

Score

7^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  24c8372c1b3e645a4ef2a7e4734f83c3_JaffaCakes118
- Size
  
  797KB
- MD5
  
  24c8372c1b3e645a4ef2a7e4734f83c3
- SHA1
  
  1ff83c04b98ed758ecafe77845f970bd57bfcaa2
- SHA256
  
  92b2dda3a940b35b940c4045e62cd92d070f5bd06cce37ba1d4760e854e4c774
- SHA512
  
  c24616af9d576afd76dfec840ad9f94393e852d8d6cdf4959e5733afda59de1723fb3679839280f6bb852b2ea7d7b807bba4ff8329d36a5cce109e5d46d6ae49
- SSDEEP
  
  24576:P+7ZX6L8foPiymPgonf/rFK+nDg4qAOFXA4WtekTY6:PUZfY2gQrPgFVFXt6
Score

7^/10

discovery evasion persistence trojan
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2

evasionpersistencetrojan