d87c87fba83f9dde93768654179ae89c31b29dad30458ed26ebaba993949f2ac | Triage

Sharing

General

Target

3b8eddaefd636c9a0cb699ad19de6bd3_JaffaCakes118
Size

882KB
Sample

240512-xeqjdsba3v
MD5

3b8eddaefd636c9a0cb699ad19de6bd3
SHA1

18f0eb026eeb0124650d1a829b04a5b4d5a01b1f
SHA256

d87c87fba83f9dde93768654179ae89c31b29dad30458ed26ebaba993949f2ac
SHA512

3288c8ecb9a2e89044bab6e1977d688b29b98ffbf9e46304eb014eafc9a1afd7ebb745baea6b5e5b1a24c045b85009a537b8a26438580d32a30469298e42015c
SSDEEP

12288:cIlQ6/l28hxUlhnOzs4pHm5NPSHrG4W9wGPq3wfRU6fbDuQNejRCCVyhO4ZFqXVs:ccxxenr4xuq8byA5+T0CVQI0l4s

Score

7^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  3b8eddaefd636c9a0cb699ad19de6bd3_JaffaCakes118
- Size
  
  882KB
- MD5
  
  3b8eddaefd636c9a0cb699ad19de6bd3
- SHA1
  
  18f0eb026eeb0124650d1a829b04a5b4d5a01b1f
- SHA256
  
  d87c87fba83f9dde93768654179ae89c31b29dad30458ed26ebaba993949f2ac
- SHA512
  
  3288c8ecb9a2e89044bab6e1977d688b29b98ffbf9e46304eb014eafc9a1afd7ebb745baea6b5e5b1a24c045b85009a537b8a26438580d32a30469298e42015c
- SSDEEP
  
  12288:cIlQ6/l28hxUlhnOzs4pHm5NPSHrG4W9wGPq3wfRU6fbDuQNejRCCVyhO4ZFqXVs:ccxxenr4xuq8byA5+T0CVQI0l4s
Score

7^/10

discovery evasion persistence trojan
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2