60e23d0045a99967339a33fb0b8d363dd3bf99a5b188fef82c4ccf335ab6d9a7 | Triage

Sharing

General

Target

a81834efa722199d7fbce42afe58963f_JaffaCakes118
Size

703KB
Sample

240614-fq8exazejr
MD5

a81834efa722199d7fbce42afe58963f
SHA1

1789921ca4e4a9311ca148e1af9262fbb2a36127
SHA256

60e23d0045a99967339a33fb0b8d363dd3bf99a5b188fef82c4ccf335ab6d9a7
SHA512

84db86bfd001e88160f4b4845683223e184cb871424f6d29accf5b5442d6557d9c9aa82ce364d5a75d864b3ecc8edd4b77941f3e93ba2c927fc7d279dedc1210
SSDEEP

12288:HviyjlMsGhLqVjJ/gaTbiO/7hlS85TMalRU24LJgyo/30pFfhdC24Wi:PYLqv/gaTbisSqrQL6yoQfhdC24Wi

Score

7^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  a81834efa722199d7fbce42afe58963f_JaffaCakes118
- Size
  
  703KB
- MD5
  
  a81834efa722199d7fbce42afe58963f
- SHA1
  
  1789921ca4e4a9311ca148e1af9262fbb2a36127
- SHA256
  
  60e23d0045a99967339a33fb0b8d363dd3bf99a5b188fef82c4ccf335ab6d9a7
- SHA512
  
  84db86bfd001e88160f4b4845683223e184cb871424f6d29accf5b5442d6557d9c9aa82ce364d5a75d864b3ecc8edd4b77941f3e93ba2c927fc7d279dedc1210
- SSDEEP
  
  12288:HviyjlMsGhLqVjJ/gaTbiO/7hlS85TMalRU24LJgyo/30pFfhdC24Wi:PYLqv/gaTbisSqrQL6yoQfhdC24Wi
Score

7^/10

discovery evasion persistence trojan
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2

evasionpersistencetrojan