9ea9a810dd25465249fd0a36c638cff45a99575db7a21dcbe38e79c0f53a4bb0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9649d39530411883785a0483f02273a0_JaffaCakes118
Size

480KB
Sample

240604-z4ybmscd95
MD5

9649d39530411883785a0483f02273a0
SHA1

edfa542f0dd595ed141314aa80d573c65ffc001b
SHA256

9ea9a810dd25465249fd0a36c638cff45a99575db7a21dcbe38e79c0f53a4bb0
SHA512

7073c9e2201e8bc22695ab45886e8ea9fc6db81eec8589580ae0e41896ba75319785e893b1f6d58f05357c48d771f8c8bf0885e48ab792511fceeaca9f003bc4
SSDEEP

12288:6feCplCUBvCkfmvz756FGtkeSUknzp7tRuvftbObt:+eskUV5a75G0OtXggbt

Score

7^/10

evasion trojan

Malware Config

Targets

- Target
  
  9649d39530411883785a0483f02273a0_JaffaCakes118
- Size
  
  480KB
- MD5
  
  9649d39530411883785a0483f02273a0
- SHA1
  
  edfa542f0dd595ed141314aa80d573c65ffc001b
- SHA256
  
  9ea9a810dd25465249fd0a36c638cff45a99575db7a21dcbe38e79c0f53a4bb0
- SHA512
  
  7073c9e2201e8bc22695ab45886e8ea9fc6db81eec8589580ae0e41896ba75319785e893b1f6d58f05357c48d771f8c8bf0885e48ab792511fceeaca9f003bc4
- SSDEEP
  
  12288:6feCplCUBvCkfmvz756FGtkeSUknzp7tRuvftbObt:+eskUV5a75G0OtXggbt
Score

7^/10

evasion trojan
- Loads dropped DLL
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2