3a2a91a0409099b471899c6b793533bc492e1d7af4477fef3d956958249ccbb3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a6f82a060db8fa2537da9d3f6783ea84_JaffaCakes118
Size

893KB
Sample

240613-2rrz7steme
MD5

a6f82a060db8fa2537da9d3f6783ea84
SHA1

d3b23758c121d594d04101a7a12a5ab89eaaab6d
SHA256

3a2a91a0409099b471899c6b793533bc492e1d7af4477fef3d956958249ccbb3
SHA512

5f258bda42a9eb721d20b4708a54291016f1ab00eda2ffcc30ed7a837bd97044c494c705f25a5c003e271d9b5fb034b34d156b45eae62ecff85cc5f2bb62c8fc
SSDEEP

12288:i1tJPmX/duI/u4IPX4sysdHEOuwhwRdnR7OKlbU+t3VsYkmdYuWU7n2PM0HxCwMX:i13kh/Fs+PwhwTR7OLajtd32PHMB1GNO

Score

7^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  a6f82a060db8fa2537da9d3f6783ea84_JaffaCakes118
- Size
  
  893KB
- MD5
  
  a6f82a060db8fa2537da9d3f6783ea84
- SHA1
  
  d3b23758c121d594d04101a7a12a5ab89eaaab6d
- SHA256
  
  3a2a91a0409099b471899c6b793533bc492e1d7af4477fef3d956958249ccbb3
- SHA512
  
  5f258bda42a9eb721d20b4708a54291016f1ab00eda2ffcc30ed7a837bd97044c494c705f25a5c003e271d9b5fb034b34d156b45eae62ecff85cc5f2bb62c8fc
- SSDEEP
  
  12288:i1tJPmX/duI/u4IPX4sysdHEOuwhwRdnR7OKlbU+t3VsYkmdYuWU7n2PM0HxCwMX:i13kh/Fs+PwhwTR7OLajtd32PHMB1GNO
Score

7^/10

discovery evasion persistence trojan
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2