6b30bb607dc812df45507e173c33e1ee53e5c2eff2c07005b1680ba304e23f6d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4e6057c6384075fc1deb197ad65eb2a4_JaffaCakes118
Size

1.9MB
Sample

240517-erdq9agh89
MD5

4e6057c6384075fc1deb197ad65eb2a4
SHA1

43e02b0e5c4f69a3319e20f7d0905073e341b097
SHA256

6b30bb607dc812df45507e173c33e1ee53e5c2eff2c07005b1680ba304e23f6d
SHA512

3b1d3eaefe2abb581c14d0ed3ddad4de4f2ea4130219d402f6f8da6b37a7e0fcad0f9a97858f73d87850d0ff81d4e0833c7efdd11a1c0c7009d0d31f90a8940e
SSDEEP

49152:CSjmKXccA7xU81kHR6gWakurxp9t7WHI1xtTY:CSjmQcs7Wo1A

Score

7^/10

evasion trojan

Malware Config

Targets

- Target
  
  4e6057c6384075fc1deb197ad65eb2a4_JaffaCakes118
- Size
  
  1.9MB
- MD5
  
  4e6057c6384075fc1deb197ad65eb2a4
- SHA1
  
  43e02b0e5c4f69a3319e20f7d0905073e341b097
- SHA256
  
  6b30bb607dc812df45507e173c33e1ee53e5c2eff2c07005b1680ba304e23f6d
- SHA512
  
  3b1d3eaefe2abb581c14d0ed3ddad4de4f2ea4130219d402f6f8da6b37a7e0fcad0f9a97858f73d87850d0ff81d4e0833c7efdd11a1c0c7009d0d31f90a8940e
- SSDEEP
  
  49152:CSjmKXccA7xU81kHR6gWakurxp9t7WHI1xtTY:CSjmQcs7Wo1A
Score

7^/10

evasion trojan
- Loads dropped DLL
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2