fbdb3c2d3a7aa0a1a666369c890c51294f23bef0bf536a34b5b82926eb3b8270 | Triage

Sharing

General

Target

0eb08df62e5f634e656f46379615f5ea_JaffaCakes118
Size

448KB
Sample

240625-tjkxxssemp
MD5

0eb08df62e5f634e656f46379615f5ea
SHA1

d2dfa06df293cd2303c1032c33ff31cf21ccc06a
SHA256

fbdb3c2d3a7aa0a1a666369c890c51294f23bef0bf536a34b5b82926eb3b8270
SHA512

00108a1af7ed5cf8f049d541f696d54c76880675396bb1f5bcb9c1e286efb76e7b6f77bdce058639bd90501745f14933b155ac3397b5afc651f0304579ab6f4a
SSDEEP

12288:QypVSnM6j93gHbknJXScFTZ2/AjjZP249saBq:npVpwNEV22/2ZhXBq

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  0eb08df62e5f634e656f46379615f5ea_JaffaCakes118
- Size
  
  448KB
- MD5
  
  0eb08df62e5f634e656f46379615f5ea
- SHA1
  
  d2dfa06df293cd2303c1032c33ff31cf21ccc06a
- SHA256
  
  fbdb3c2d3a7aa0a1a666369c890c51294f23bef0bf536a34b5b82926eb3b8270
- SHA512
  
  00108a1af7ed5cf8f049d541f696d54c76880675396bb1f5bcb9c1e286efb76e7b6f77bdce058639bd90501745f14933b155ac3397b5afc651f0304579ab6f4a
- SSDEEP
  
  12288:QypVSnM6j93gHbknJXScFTZ2/AjjZP249saBq:npVpwNEV22/2ZhXBq
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2