294a6eaab5893ee8d64becea0c67442bb1238cd02576fe48f42af7ba07b1583c | Triage

Sharing

General

Target

400786e873e071194a7242a8393c9eda_JaffaCakes118
Size

811KB
Sample

240513-r9l7kaba6y
MD5

400786e873e071194a7242a8393c9eda
SHA1

5c6ae74e81ca7f9ffdef7cc0d37e7e72e57e9ae3
SHA256

294a6eaab5893ee8d64becea0c67442bb1238cd02576fe48f42af7ba07b1583c
SHA512

6618da39d5f3bc77f86ae0d833d776c675ef3ee8dbd0d349df3348e7877fcd6027f104648a0a3bb3ed56593283b7fcd4bb25c57d37c5f58a38c4613a103ff0f9
SSDEEP

12288:kxk8LnGkDxqKaylTCSgAt3y1CcqyTW95dcUqqeG80TuhPr786IVAW+F2LTLGzC3m:6d1AUTCSBtiYqSJcKCFX86qADF2R3m

Score

7^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  400786e873e071194a7242a8393c9eda_JaffaCakes118
- Size
  
  811KB
- MD5
  
  400786e873e071194a7242a8393c9eda
- SHA1
  
  5c6ae74e81ca7f9ffdef7cc0d37e7e72e57e9ae3
- SHA256
  
  294a6eaab5893ee8d64becea0c67442bb1238cd02576fe48f42af7ba07b1583c
- SHA512
  
  6618da39d5f3bc77f86ae0d833d776c675ef3ee8dbd0d349df3348e7877fcd6027f104648a0a3bb3ed56593283b7fcd4bb25c57d37c5f58a38c4613a103ff0f9
- SSDEEP
  
  12288:kxk8LnGkDxqKaylTCSgAt3y1CcqyTW95dcUqqeG80TuhPr786IVAW+F2LTLGzC3m:6d1AUTCSBtiYqSJcKCFX86qADF2R3m
Score

7^/10

discovery evasion persistence trojan
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2

evasionpersistencetrojan