0c015ba9812ae3dd8af2d9f107d121389ecb277673f3840a085f080d8227f6fd | Triage

Sharing

General

Target

0dbd22a6f2aeb6bc0281b9dc0f34f24b_JaffaCakes118
Size

428KB
Sample

240625-mkh2dsvanc
MD5

0dbd22a6f2aeb6bc0281b9dc0f34f24b
SHA1

d1cb23babf850718fa6fc792a2deebc9bcf2970f
SHA256

0c015ba9812ae3dd8af2d9f107d121389ecb277673f3840a085f080d8227f6fd
SHA512

cd6cb1503596e4e1df4d9ac88e84fc7aef3f267528505a8eee3ceab7c21e33eb750922d0c9da742b10ca64a19b001e6d552400b7c320ea20d9c221df4ef79994
SSDEEP

12288:zzCozS0+r/rYUbYPCNfNNvKzdEwLSQ3Pxl:z+iD+TrDbgCUxLD3

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  0dbd22a6f2aeb6bc0281b9dc0f34f24b_JaffaCakes118
- Size
  
  428KB
- MD5
  
  0dbd22a6f2aeb6bc0281b9dc0f34f24b
- SHA1
  
  d1cb23babf850718fa6fc792a2deebc9bcf2970f
- SHA256
  
  0c015ba9812ae3dd8af2d9f107d121389ecb277673f3840a085f080d8227f6fd
- SHA512
  
  cd6cb1503596e4e1df4d9ac88e84fc7aef3f267528505a8eee3ceab7c21e33eb750922d0c9da742b10ca64a19b001e6d552400b7c320ea20d9c221df4ef79994
- SSDEEP
  
  12288:zzCozS0+r/rYUbYPCNfNNvKzdEwLSQ3Pxl:z+iD+TrDbgCUxLD3
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2