2af0e5e2d702124d1aba54bdfc0c0a8b66fba6c005e76ea5fc1fd44260024df4 | Triage

Sharing

General

Target

91c11459455de52d17607efff349d429_JaffaCakes118
Size

873KB
Sample

240603-pfvkqseb3t
MD5

91c11459455de52d17607efff349d429
SHA1

00f8c47dc9d0b631739f3ec553e82924084fb1d3
SHA256

2af0e5e2d702124d1aba54bdfc0c0a8b66fba6c005e76ea5fc1fd44260024df4
SHA512

6f835303859b8c2ffb944db227abe9de9eff6b66855b853dc1fa384237b649193ee065c467ec844b727c09d3420c0be6dc91f9f1f77e2e79ba80e3df436d2f82
SSDEEP

24576:YwdogeTFYeHagGjS0581bes4OnKJJ9RGHZPe9CZ9QD:LdoBKeBUS6gK3Si4mD

Score

7^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  91c11459455de52d17607efff349d429_JaffaCakes118
- Size
  
  873KB
- MD5
  
  91c11459455de52d17607efff349d429
- SHA1
  
  00f8c47dc9d0b631739f3ec553e82924084fb1d3
- SHA256
  
  2af0e5e2d702124d1aba54bdfc0c0a8b66fba6c005e76ea5fc1fd44260024df4
- SHA512
  
  6f835303859b8c2ffb944db227abe9de9eff6b66855b853dc1fa384237b649193ee065c467ec844b727c09d3420c0be6dc91f9f1f77e2e79ba80e3df436d2f82
- SSDEEP
  
  24576:YwdogeTFYeHagGjS0581bes4OnKJJ9RGHZPe9CZ9QD:LdoBKeBUS6gK3Si4mD
Score

7^/10

discovery evasion persistence trojan
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2