c1b038f8702afa80a5ee427fa8bf961634d6c4c1249f2cacbc75fc102897243d | Triage

Sharing

General

Target

2ae82cfd7be91de203c0fdf570aefab2_JaffaCakes118
Size

870KB
Sample

240509-t7relsbh8w
MD5

2ae82cfd7be91de203c0fdf570aefab2
SHA1

2fc0c817cd9f49f09cca41d0b2b817fcb40b4069
SHA256

c1b038f8702afa80a5ee427fa8bf961634d6c4c1249f2cacbc75fc102897243d
SHA512

85711e9314236bd8e1617b1bd5aa9ebe6ccd5dafa8624c0a96af2cd0068befebf572ff06233420347d20e59b2e1b1085dc0f4e7bc98fa058ddfe076604c4d933
SSDEEP

24576:cVZepCjtn3+3clWAEBk5PTw8URWyRvn0TZ/1qCzaTIj99JHrdC:cVZKCjtnOslhRNc7RWavn01/1zzfPJBC

Score

7^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  2ae82cfd7be91de203c0fdf570aefab2_JaffaCakes118
- Size
  
  870KB
- MD5
  
  2ae82cfd7be91de203c0fdf570aefab2
- SHA1
  
  2fc0c817cd9f49f09cca41d0b2b817fcb40b4069
- SHA256
  
  c1b038f8702afa80a5ee427fa8bf961634d6c4c1249f2cacbc75fc102897243d
- SHA512
  
  85711e9314236bd8e1617b1bd5aa9ebe6ccd5dafa8624c0a96af2cd0068befebf572ff06233420347d20e59b2e1b1085dc0f4e7bc98fa058ddfe076604c4d933
- SSDEEP
  
  24576:cVZepCjtn3+3clWAEBk5PTw8URWyRvn0TZ/1qCzaTIj99JHrdC:cVZKCjtnOslhRNc7RWavn01/1zzfPJBC
Score

7^/10

discovery evasion persistence trojan
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2