1a22238435f401027278a472707ee4f15975b95511309273bdcc286886be8142 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a26f3c9a4e2c0885caf4dd316ced9938_JaffaCakes118
Size

1.0MB
Sample

240612-z74ylavbnq
MD5

a26f3c9a4e2c0885caf4dd316ced9938
SHA1

7e58b29da09ac7bff4cbce9772a8862ae15c290e
SHA256

1a22238435f401027278a472707ee4f15975b95511309273bdcc286886be8142
SHA512

24b52c23a56bfd5f25778b9cb5f0563172362c3d1e444fc65ef07c33a653fc4d68ddaf0500251252cf8664dde20c37221dda04ab085cf1234a1edb5ea70ce2d5
SSDEEP

24576:LwVHoZ1P8DmAeX+owtOA1ZdX5WC26aeqv6VuT:Lwo7P8DmAeOowtOAPdXoedqvK+

Score

7^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  a26f3c9a4e2c0885caf4dd316ced9938_JaffaCakes118
- Size
  
  1.0MB
- MD5
  
  a26f3c9a4e2c0885caf4dd316ced9938
- SHA1
  
  7e58b29da09ac7bff4cbce9772a8862ae15c290e
- SHA256
  
  1a22238435f401027278a472707ee4f15975b95511309273bdcc286886be8142
- SHA512
  
  24b52c23a56bfd5f25778b9cb5f0563172362c3d1e444fc65ef07c33a653fc4d68ddaf0500251252cf8664dde20c37221dda04ab085cf1234a1edb5ea70ce2d5
- SSDEEP
  
  24576:LwVHoZ1P8DmAeX+owtOA1ZdX5WC26aeqv6VuT:Lwo7P8DmAeOowtOAPdXoedqvK+
Score

7^/10

discovery evasion persistence trojan
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2

evasionpersistencetrojan