53b763d072cf2f50a190daf2f66140a1f71b2df2937de0aed28f9f985fea5915 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a0260ed92ab9196de7662d2d539cffad_JaffaCakes118
Size

887KB
Sample

240612-k5rg6axbna
MD5

a0260ed92ab9196de7662d2d539cffad
SHA1

c1642ec99f067a6440c01bbf8f46ad973da639e0
SHA256

53b763d072cf2f50a190daf2f66140a1f71b2df2937de0aed28f9f985fea5915
SHA512

4157a9312760c583d78932b61497fd5e3331d094baab4675175265c1edfe1356f257a565d48321859aed41dd17e85b1f3b6f20875824eb560b2555ef55c93e79
SSDEEP

12288:siAfmb28iSusqzqiGITW3nqOnOPHx9xnEcsqfIAhtSqtstGUcbolZMK20hoYTmob:sBseDTFOqx3EwcqKQNoDMeoEt+PL1aDr

Score

7^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  a0260ed92ab9196de7662d2d539cffad_JaffaCakes118
- Size
  
  887KB
- MD5
  
  a0260ed92ab9196de7662d2d539cffad
- SHA1
  
  c1642ec99f067a6440c01bbf8f46ad973da639e0
- SHA256
  
  53b763d072cf2f50a190daf2f66140a1f71b2df2937de0aed28f9f985fea5915
- SHA512
  
  4157a9312760c583d78932b61497fd5e3331d094baab4675175265c1edfe1356f257a565d48321859aed41dd17e85b1f3b6f20875824eb560b2555ef55c93e79
- SSDEEP
  
  12288:siAfmb28iSusqzqiGITW3nqOnOPHx9xnEcsqfIAhtSqtstGUcbolZMK20hoYTmob:sBseDTFOqx3EwcqKQNoDMeoEt+PL1aDr
Score

7^/10

discovery evasion persistence trojan
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2