2d53e6368f60c164b521bda11b7bd0f740cf6306c1f2a127b0a60a54b8bceebd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9d770e16713432f98c4e865eeac4c860_JaffaCakes118
Size

794KB
Sample

240611-jk4fjszekk
MD5

9d770e16713432f98c4e865eeac4c860
SHA1

b317a9600cb3617d66d54d5c225096d673028323
SHA256

2d53e6368f60c164b521bda11b7bd0f740cf6306c1f2a127b0a60a54b8bceebd
SHA512

3fa001aeab84e019e5117bebd01f3f951e7016bbfd6e8ceff6dfdde17d3127de5257423d20aa2871b25d2199f052cf63f18ba3c0164c6662bf2aa67b35ff8187
SSDEEP

12288:IihIoLuGi8nuOxm65TGq5lR4E7N7OlpRzHvDCJ/Ennd94qoFyVzq7g+U:7ZH9xtTGq5lR4AO7RDY/EduRT7g+U

Score

7^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  9d770e16713432f98c4e865eeac4c860_JaffaCakes118
- Size
  
  794KB
- MD5
  
  9d770e16713432f98c4e865eeac4c860
- SHA1
  
  b317a9600cb3617d66d54d5c225096d673028323
- SHA256
  
  2d53e6368f60c164b521bda11b7bd0f740cf6306c1f2a127b0a60a54b8bceebd
- SHA512
  
  3fa001aeab84e019e5117bebd01f3f951e7016bbfd6e8ceff6dfdde17d3127de5257423d20aa2871b25d2199f052cf63f18ba3c0164c6662bf2aa67b35ff8187
- SSDEEP
  
  12288:IihIoLuGi8nuOxm65TGq5lR4E7N7OlpRzHvDCJ/Ennd94qoFyVzq7g+U:7ZH9xtTGq5lR4AO7RDY/EduRT7g+U
Score

7^/10

discovery evasion persistence trojan
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2

evasionpersistencetrojan