658832f9be01b503e674ca1c2dd8f0d116538485bdc77154512640755c930bcb | Triage

Sharing

General

Target

0bb06865433bde3b5ada56407dbd44df_JaffaCakes118
Size

411KB
Sample

240625-bfmy1avglr
MD5

0bb06865433bde3b5ada56407dbd44df
SHA1

e7dbea467ec8f5e0cb5b255dc1d7fa24437b0a16
SHA256

658832f9be01b503e674ca1c2dd8f0d116538485bdc77154512640755c930bcb
SHA512

4d91cf59663332abcecd9121885d8dc3492c3e3cae79441ac880eb70f173765e70356c882aa0497f55f5122e7f907e4b95fd6f6a3a0bd8864f6e29cfceb9e459
SSDEEP

6144:HbwDt7B0BvqvWqG2P1vPSzrZGe3BmwxRBO3ocaTQsSvFCCLoQlvHoKekDRvRY/zh:H0DRB0hFf2JazbNvs2WCCdhlRCcRfY

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  0bb06865433bde3b5ada56407dbd44df_JaffaCakes118
- Size
  
  411KB
- MD5
  
  0bb06865433bde3b5ada56407dbd44df
- SHA1
  
  e7dbea467ec8f5e0cb5b255dc1d7fa24437b0a16
- SHA256
  
  658832f9be01b503e674ca1c2dd8f0d116538485bdc77154512640755c930bcb
- SHA512
  
  4d91cf59663332abcecd9121885d8dc3492c3e3cae79441ac880eb70f173765e70356c882aa0497f55f5122e7f907e4b95fd6f6a3a0bd8864f6e29cfceb9e459
- SSDEEP
  
  6144:HbwDt7B0BvqvWqG2P1vPSzrZGe3BmwxRBO3ocaTQsSvFCCLoQlvHoKekDRvRY/zh:H0DRB0hFf2JazbNvs2WCCdhlRCcRfY
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2