9bc56184fed8ee5ce5ac1bb754f32e66a54de870c8abea2b3f8766b9aaa6609d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7d19b1514941f8091993703ccc1a3f4d_JaffaCakes118
Size

812KB
Sample

240528-qmjbqagb53
MD5

7d19b1514941f8091993703ccc1a3f4d
SHA1

dda780a76192a923f53c3c12d37021a98fcef997
SHA256

9bc56184fed8ee5ce5ac1bb754f32e66a54de870c8abea2b3f8766b9aaa6609d
SHA512

3ef29ce552ef12839c0cac88b349237a6c4cbcd36fd71c319496f22181bb8c102d789f4a6be57de19e31df449cc206eb48c44a551937d7826eed7d10d87bad3b
SSDEEP

12288:UOZlJuYskdHX2CWKLRS7Gw5R6cgU53JCJVXmGgjYc1RImHvkWsu0QAdQJWqE:WCWYSj5YcgUjGVXmzF1iKMWsOkqE

Score

7^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  7d19b1514941f8091993703ccc1a3f4d_JaffaCakes118
- Size
  
  812KB
- MD5
  
  7d19b1514941f8091993703ccc1a3f4d
- SHA1
  
  dda780a76192a923f53c3c12d37021a98fcef997
- SHA256
  
  9bc56184fed8ee5ce5ac1bb754f32e66a54de870c8abea2b3f8766b9aaa6609d
- SHA512
  
  3ef29ce552ef12839c0cac88b349237a6c4cbcd36fd71c319496f22181bb8c102d789f4a6be57de19e31df449cc206eb48c44a551937d7826eed7d10d87bad3b
- SSDEEP
  
  12288:UOZlJuYskdHX2CWKLRS7Gw5R6cgU53JCJVXmGgjYc1RImHvkWsu0QAdQJWqE:WCWYSj5YcgUjGVXmzF1iKMWsOkqE
Score

7^/10

discovery evasion persistence trojan
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2

evasionpersistencetrojan