6c3c709525d16b70467e391f353e95dcfad921da2afe5e1ae5e8b0d971329b99 | Triage

Sharing

General

Target

938cf35ff754637553b3f1be23520819_JaffaCakes118
Size

770KB
Sample

240604-eggp6acc4x
MD5

938cf35ff754637553b3f1be23520819
SHA1

61e9f64d9d8f8574dd91a600822f1fcfc41508c2
SHA256

6c3c709525d16b70467e391f353e95dcfad921da2afe5e1ae5e8b0d971329b99
SHA512

6c283c829398d2435645d097f11a4e56f050377d2216ea209edfb838e1b18c70fa379736dbb8bb6a5852320711bef7a4c5929c0e930ed209ecfbdd96f8b9592e
SSDEEP

24576:7Le0ejGpSLJYtmtzCl58P9FHnFM2imgVLGCLDir:7L90vLJJzqO9/M2imQsr

Score

7^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  938cf35ff754637553b3f1be23520819_JaffaCakes118
- Size
  
  770KB
- MD5
  
  938cf35ff754637553b3f1be23520819
- SHA1
  
  61e9f64d9d8f8574dd91a600822f1fcfc41508c2
- SHA256
  
  6c3c709525d16b70467e391f353e95dcfad921da2afe5e1ae5e8b0d971329b99
- SHA512
  
  6c283c829398d2435645d097f11a4e56f050377d2216ea209edfb838e1b18c70fa379736dbb8bb6a5852320711bef7a4c5929c0e930ed209ecfbdd96f8b9592e
- SSDEEP
  
  24576:7Le0ejGpSLJYtmtzCl58P9FHnFM2imgVLGCLDir:7L90vLJJzqO9/M2imQsr
Score

7^/10

discovery evasion persistence trojan
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2