b745f3315fad94e9dd9477eb19af91c62c2c70fa0b3c3ad084889c84d0d64606 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

912291f7833104f7aaafa05860b6b851_JaffaCakes118
Size

836KB
Sample

240603-kfk9vahb7y
MD5

912291f7833104f7aaafa05860b6b851
SHA1

c5c94f03a8bb924a2677c8557d54b3744b2cb695
SHA256

b745f3315fad94e9dd9477eb19af91c62c2c70fa0b3c3ad084889c84d0d64606
SHA512

f427ae66b7e7b36c5b4c1d5ac15570594cb4d93110d4a721cf675e87a9af0a957dab89a4ece206bba55135f6d41b3660922624f430dfdbb9e7789b047dfc33a6
SSDEEP

12288:2ixuPogUFisiNlqubo5uG97BQ9x7tBv1axpetWZVea68xSSGiaMRY6o+6F1pk8ri:wdwQLTvmpd8CY+6F1pk8r3EGuERut/SY

Score

7^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  912291f7833104f7aaafa05860b6b851_JaffaCakes118
- Size
  
  836KB
- MD5
  
  912291f7833104f7aaafa05860b6b851
- SHA1
  
  c5c94f03a8bb924a2677c8557d54b3744b2cb695
- SHA256
  
  b745f3315fad94e9dd9477eb19af91c62c2c70fa0b3c3ad084889c84d0d64606
- SHA512
  
  f427ae66b7e7b36c5b4c1d5ac15570594cb4d93110d4a721cf675e87a9af0a957dab89a4ece206bba55135f6d41b3660922624f430dfdbb9e7789b047dfc33a6
- SSDEEP
  
  12288:2ixuPogUFisiNlqubo5uG97BQ9x7tBv1axpetWZVea68xSSGiaMRY6o+6F1pk8ri:wdwQLTvmpd8CY+6F1pk8r3EGuERut/SY
Score

7^/10

discovery evasion persistence trojan
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2

evasionpersistencetrojan