dc01b742c1be66f7f8b22b5c979359a312c4b7e7e26b3a595edd113dd130c8c9 | Triage

Sharing

General

Target

66a3c8e986d0e8986f19b10f5fc8a9e8_JaffaCakes118
Size

872KB
Sample

240522-kdt4zahe49
MD5

66a3c8e986d0e8986f19b10f5fc8a9e8
SHA1

cca0c23fe3c4ee75f47e78e46cf71f301265ec2a
SHA256

dc01b742c1be66f7f8b22b5c979359a312c4b7e7e26b3a595edd113dd130c8c9
SHA512

68e96b92c6693aa9af8c2183f66cc650aca33b7640475762e7ca33c4f6222185e5c41b016339da37bd30b340de85148449068241883bcfeff2797788eaf56f4b
SSDEEP

24576:D04bqOT8jh09oWsWTqt/LJzLgJ/tOviJy2gbq2FDW:D04bqOT4huX2/VzEJ/PJuWiW

Score

7^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  66a3c8e986d0e8986f19b10f5fc8a9e8_JaffaCakes118
- Size
  
  872KB
- MD5
  
  66a3c8e986d0e8986f19b10f5fc8a9e8
- SHA1
  
  cca0c23fe3c4ee75f47e78e46cf71f301265ec2a
- SHA256
  
  dc01b742c1be66f7f8b22b5c979359a312c4b7e7e26b3a595edd113dd130c8c9
- SHA512
  
  68e96b92c6693aa9af8c2183f66cc650aca33b7640475762e7ca33c4f6222185e5c41b016339da37bd30b340de85148449068241883bcfeff2797788eaf56f4b
- SSDEEP
  
  24576:D04bqOT8jh09oWsWTqt/LJzLgJ/tOviJy2gbq2FDW:D04bqOT4huX2/VzEJ/PJuWiW
Score

7^/10

discovery evasion persistence trojan
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2