1861a00971783f8dfc44eac572d45fd22c0bebf29ad7e8888b64a827cd8cb6e9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6f6f95c2668ec5f203af983ae4893fe_JaffaCakes118
Size

872KB
Sample

240617-f4dsfszgqp
MD5

b6f6f95c2668ec5f203af983ae4893fe
SHA1

c710195ae59a92c8e5733a3e58aed1389bcb19f3
SHA256

1861a00971783f8dfc44eac572d45fd22c0bebf29ad7e8888b64a827cd8cb6e9
SHA512

9cf6f5446491b5a0fcdc0f126f4eb5d1c1cf233a791eb75e201f2940eb4f8d2828ddd0e3131f2b37deefead8b16aa32c91e5340257c90fbf38ec652adac01ad7
SSDEEP

24576:5qAvr53Sn/xgjbbee2PD4hpBbCLwo8IZgA7gyrMD4K:5q61Su3eB7qvCMo8cgiMcK

Score

7^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  b6f6f95c2668ec5f203af983ae4893fe_JaffaCakes118
- Size
  
  872KB
- MD5
  
  b6f6f95c2668ec5f203af983ae4893fe
- SHA1
  
  c710195ae59a92c8e5733a3e58aed1389bcb19f3
- SHA256
  
  1861a00971783f8dfc44eac572d45fd22c0bebf29ad7e8888b64a827cd8cb6e9
- SHA512
  
  9cf6f5446491b5a0fcdc0f126f4eb5d1c1cf233a791eb75e201f2940eb4f8d2828ddd0e3131f2b37deefead8b16aa32c91e5340257c90fbf38ec652adac01ad7
- SSDEEP
  
  24576:5qAvr53Sn/xgjbbee2PD4hpBbCLwo8IZgA7gyrMD4K:5q61Su3eB7qvCMo8cgiMcK
Score

7^/10

discovery evasion persistence trojan
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2