7c411adaa05fe3f368acca417d15662fd2057df49ae2945fcd4c058d4a826080 | Triage

Sharing

General

Target

25156626002546058dce1191e0386ab7_JaffaCakes118
Size

387KB
Sample

240704-h4fyxszfpp
MD5

25156626002546058dce1191e0386ab7
SHA1

5e612b93d5e29c5a09220749d5f1d8842c01c213
SHA256

7c411adaa05fe3f368acca417d15662fd2057df49ae2945fcd4c058d4a826080
SHA512

ddeeb1704b3be10254298476aa211b5abc2b3fde6bc64072fdc5f619e72b375cfac74871a713c5bf0734f0a26dcb140690a42dd25c2d6c93db2d861758011b39
SSDEEP

12288:eR6S15cdkN/U5onLa/0spyxIuZvUXXWDZAdvFh:nS/Ca/mo+/0ssIdm9AP

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  25156626002546058dce1191e0386ab7_JaffaCakes118
- Size
  
  387KB
- MD5
  
  25156626002546058dce1191e0386ab7
- SHA1
  
  5e612b93d5e29c5a09220749d5f1d8842c01c213
- SHA256
  
  7c411adaa05fe3f368acca417d15662fd2057df49ae2945fcd4c058d4a826080
- SHA512
  
  ddeeb1704b3be10254298476aa211b5abc2b3fde6bc64072fdc5f619e72b375cfac74871a713c5bf0734f0a26dcb140690a42dd25c2d6c93db2d861758011b39
- SSDEEP
  
  12288:eR6S15cdkN/U5onLa/0spyxIuZvUXXWDZAdvFh:nS/Ca/mo+/0ssIdm9AP
Score

10^/10

evasion trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2