6d1f5160fd581f155155e63457bd652c47627f607215a6c82c0cd218c3aed51c | Triage

Sharing

General

Target

64bd2f10d23546457727fa5236217d06_JaffaCakes118
Size

1.8MB
Sample

240521-zqs5rsab84
MD5

64bd2f10d23546457727fa5236217d06
SHA1

195f99d4f318b311c38dd2bedadd427361f552aa
SHA256

6d1f5160fd581f155155e63457bd652c47627f607215a6c82c0cd218c3aed51c
SHA512

3d7ac632f3f856a2d80f9c8ef12a7a364c6a98df3d569d40a5df6f0b15251ff1fa1541b4b516d818e4faf699b5e9eec9b9165e85f14cfd7603c1a1a90c84353f
SSDEEP

24576:lWxhHS/BqXw8fAn4ouMfKDmrSuc8hbq04HotXXjUtPkF1WjMxyspg8P:HWTI0AnrSeS0j1NxyTo

Score

6^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  64bd2f10d23546457727fa5236217d06_JaffaCakes118
- Size
  
  1.8MB
- MD5
  
  64bd2f10d23546457727fa5236217d06
- SHA1
  
  195f99d4f318b311c38dd2bedadd427361f552aa
- SHA256
  
  6d1f5160fd581f155155e63457bd652c47627f607215a6c82c0cd218c3aed51c
- SHA512
  
  3d7ac632f3f856a2d80f9c8ef12a7a364c6a98df3d569d40a5df6f0b15251ff1fa1541b4b516d818e4faf699b5e9eec9b9165e85f14cfd7603c1a1a90c84353f
- SSDEEP
  
  24576:lWxhHS/BqXw8fAn4ouMfKDmrSuc8hbq04HotXXjUtPkF1WjMxyspg8P:HWTI0AnrSeS0j1NxyTo
Score

6^/10

evasion persistence trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan