d18601ec1a8850fc20e58051ac99cf5f9ff539f5b0545c570301331de6e12747 | Triage

Sharing

General

Target

688255475d0e0f09fc78d77dc13a2b99_JaffaCakes118
Size

817KB
Sample

240522-y6xbpafd52
MD5

688255475d0e0f09fc78d77dc13a2b99
SHA1

10c8f31f81751a09271aa129610d0d23e8ac6a42
SHA256

d18601ec1a8850fc20e58051ac99cf5f9ff539f5b0545c570301331de6e12747
SHA512

7d125259b08389bb0db62ca74b224bb5bcbaf6931d62087e019d02d5f9790d3581c7fa39ecd4e5316030c9798fa7048682395091ed693e2be283eb16dafbdb32
SSDEEP

24576:tLmyZlg1ZGVV56wkwDllUa9em5Fzo1CZXqYLo:tyyZlaIVUsla2xDl6Eo

Score

7^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  688255475d0e0f09fc78d77dc13a2b99_JaffaCakes118
- Size
  
  817KB
- MD5
  
  688255475d0e0f09fc78d77dc13a2b99
- SHA1
  
  10c8f31f81751a09271aa129610d0d23e8ac6a42
- SHA256
  
  d18601ec1a8850fc20e58051ac99cf5f9ff539f5b0545c570301331de6e12747
- SHA512
  
  7d125259b08389bb0db62ca74b224bb5bcbaf6931d62087e019d02d5f9790d3581c7fa39ecd4e5316030c9798fa7048682395091ed693e2be283eb16dafbdb32
- SSDEEP
  
  24576:tLmyZlg1ZGVV56wkwDllUa9em5Fzo1CZXqYLo:tyyZlaIVUsla2xDl6Eo
Score

7^/10

discovery evasion persistence trojan
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2

evasionpersistencetrojan