c3abd5661f1dbb0129636d22a6a6511351ef19bd7fe4dbb99ef550c61a9aec6f | Triage

Sharing

General

Target

28176d5111eedda0fbcc22b3328612a7_JaffaCakes118
Size

872KB
Sample

240509-d1kqgsba29
MD5

28176d5111eedda0fbcc22b3328612a7
SHA1

cd3c4111a91858bdae40b684c3debbed4e1db6f8
SHA256

c3abd5661f1dbb0129636d22a6a6511351ef19bd7fe4dbb99ef550c61a9aec6f
SHA512

c2247f1c2522e76ff8ac86eee209a84f9b6c10e5e5532ff5236545ef0fb61ff65074bbbe564d4949bb5695417b42b57a05ccaa1560c9a23da0f699109a5e3449
SSDEEP

24576:f/ozvOT8jhswWvrvGkAT3Lj+MueTCUjsL6Lr7eHDX:f/ozvOT4hDWvrv6/xmveLvaX

Score

7^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  28176d5111eedda0fbcc22b3328612a7_JaffaCakes118
- Size
  
  872KB
- MD5
  
  28176d5111eedda0fbcc22b3328612a7
- SHA1
  
  cd3c4111a91858bdae40b684c3debbed4e1db6f8
- SHA256
  
  c3abd5661f1dbb0129636d22a6a6511351ef19bd7fe4dbb99ef550c61a9aec6f
- SHA512
  
  c2247f1c2522e76ff8ac86eee209a84f9b6c10e5e5532ff5236545ef0fb61ff65074bbbe564d4949bb5695417b42b57a05ccaa1560c9a23da0f699109a5e3449
- SSDEEP
  
  24576:f/ozvOT8jhswWvrvGkAT3Lj+MueTCUjsL6Lr7eHDX:f/ozvOT4hDWvrv6/xmveLvaX
Score

7^/10

discovery evasion persistence trojan
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2