e7633e4a4aac45a84c47ce5bfdb69002313519480de89bed54a3a302644c06eb | Triage

Sharing

General

Target

7f471ab641cd70f46040d87d0e069559_JaffaCakes118
Size

832KB
Sample

240529-dewwmagf22
MD5

7f471ab641cd70f46040d87d0e069559
SHA1

9d0be4d85dfa1d7cbd618dd21597a9e5a840138b
SHA256

e7633e4a4aac45a84c47ce5bfdb69002313519480de89bed54a3a302644c06eb
SHA512

68956795c9e6d1d28e59f9a9f499694e7f87ee25504a955fe204f1ff800fed79f3b416813d340ee3e2c11f0ba8fefea8c6f21cf86f4af424267c66221711d777
SSDEEP

12288:LLL1p5LJJObRb3inRn5b8wSno51wsTBqhDknc7R8qT8yIhPdR5P2O3Iwrb:fLXBOLmRnx2nTeqhQne8qTQhFDP5rb

Score

7^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  7f471ab641cd70f46040d87d0e069559_JaffaCakes118
- Size
  
  832KB
- MD5
  
  7f471ab641cd70f46040d87d0e069559
- SHA1
  
  9d0be4d85dfa1d7cbd618dd21597a9e5a840138b
- SHA256
  
  e7633e4a4aac45a84c47ce5bfdb69002313519480de89bed54a3a302644c06eb
- SHA512
  
  68956795c9e6d1d28e59f9a9f499694e7f87ee25504a955fe204f1ff800fed79f3b416813d340ee3e2c11f0ba8fefea8c6f21cf86f4af424267c66221711d777
- SSDEEP
  
  12288:LLL1p5LJJObRb3inRn5b8wSno51wsTBqhDknc7R8qT8yIhPdR5P2O3Iwrb:fLXBOLmRnx2nTeqhQne8qTQhFDP5rb
Score

7^/10

discovery evasion persistence trojan
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2

evasionpersistencetrojan